IRIX workstation hardening - Printable Version
+- IRIX Network Forums (//forums.irixnet.org)
+-- Forum: SGI/MIPS (//forums.irixnet.org/forum-3.html)
+--- Forum: IRIX/Software (//forums.irixnet.org/forum-7.html)
+--- Thread: IRIX workstation hardening (/thread-2879.html)
+- IRIX Network Forums (//forums.irixnet.org)
+-- Forum: SGI/MIPS (//forums.irixnet.org/forum-3.html)
+--- Forum: IRIX/Software (//forums.irixnet.org/forum-7.html)
+--- Thread: IRIX workstation hardening (/thread-2879.html)
Pages:
1
2
IRIX workstation hardening - Shiunbird - 05-04-2021
Interesting document.
https://www.giac.org/paper/gsec/4374/securing-irix-6526-workstation/107207
RE: IRIX workstation hardening - Raion - 05-04-2021
I've seen that paper around and adapted it to our wiki as part of IRIX Setup 101.
RE: IRIX workstation hardening - jenna64bit - 05-06-2021
Oh those are both pretty great, I hadn’t seen that part of the Wiki before. I wonder, with PAM, could newer security modules be ported over?
RE: IRIX workstation hardening - Raion - 05-06-2021
It's not the same as Linux PAM it appears and I don't know if it was ever documented.
RE: IRIX workstation hardening - jenna64bit - 05-07-2021
Dang, I was hoping it'd be something along the lines of an Irix kernel module with the same API, as PAM is for Linux. Anyway, thanks again for the wiki pages!
RE: IRIX workstation hardening - Raion - 05-07-2021
It should be worth noting that not even all of the BSDs use PAM. I'm not saying it's impossible to Port modules over but as far as I know it's not a straightforward drop-in process.
The only place it's really standard is in GNU/Linux and FreeBSD as far as I know. Solaris might have it but I haven't looked at that recently.
A lot of my efforts are focused on documenting things and replacing userland components right now because that's where we have the most flexibility. Until the various subsystems of the system kernel are documented it's going to be very difficult to audit it much less extend it.
RE: IRIX workstation hardening - Shiunbird - 05-07-2021
Some angel could one day leak IRIX's source code...
(if anyone at HP still has it)
RE: IRIX workstation hardening - Raion - 05-07-2021
I have source code but it's on a tape in a safe deposit box. I've never looked at the code personally.
RE: IRIX workstation hardening - vishnu - 05-08-2021
All of IRIX 5.3 is online, it's pretty easy to find it so I won't post a link. All I can say is the coders were not big believers in commenting. Only parts of IRIX 6 ever made it into the wild.
RE: IRIX workstation hardening - shrek - 05-10-2021
(05-07-2021, 08:05 PM)Raion Wrote: I have source code but it's on a tape in a safe deposit box. I've never looked at the code personally.
Please, please, please, please, PLEASE make a backup.