This procedure details one way, of many, to configure a secure firewall platform based on Sun Solaris. It will be too restrictive for most other uses.It may even be too restrictive for your firewall. No warranty is made regarding the accuracy or reliability of this document. Use it at your own risk.
Traditionally, Unix/Linux/POSIX filenames can be almost any sequence of bytes, and their meaning is unassigned. The only real rules are that "/" is always the directory separator, and that filenames can't contain byte 0 (because this is the terminator). Although this is flexible, this creates many unnecessary problems. In particular, this lack of limitations makes it unnecessarily difficult to write correct programs (enabling many security flaws), makes it impossible to consistently and accurately display filenames, causes portability problems, and confuses users. more ....
Comments