Security and Network Setup System Guide4-8 Common ControllerSolaris file permissions securedThe fix-modes utility (from the Solaris Security Toolkit) adjustsgroup and world write permissions. It is run with the '-s' option tosecure file permissions for Solaris files that were created atinstall time only. Customer-generated files will not be affected.NOTE: When this command is run, a file called /var/sadm/install/content.mods is left. Do not delete this file. It containsvaluable information needed by fix modes to revert the changesto the system file permissions if the security setting is changedback to medium.Network and name service changesDisabling secure name service databasesThe following databases are disabled when Security is invoked:• passwd(4)• group(4)• exec_attr(4)• prof_attr(4)• user_attr(4)Multicast routing disabledMulticast is used to send data to many systems at the sametimewhile using one address.OS and host information hiddenThe ftp, telnet and sendmail banners are set to null so that usersin cannot see the hostname and OS level. (Note that all ofthese services are prohibited with a 'high' security setting, but ifthey are re-enabled manually the hostname information willremain hidden.)Sendmail daemon securedSendmail is forced to perform only outgoing mail. No incomingmail will be accepted.
