OpenSolaris

Synopsis: *mysql* should run with least privilege
Bug ID: 6740580 | Category: database:mysql | State: 3-Accepted | Keywords: gse-sec-team | immutable-service-containers | Reported: 22-August-2008 | Reported against:
Last Updated: 8-September-2008

Synopsis: ppriv -s P-... fails unless preceded by ppriv -s E-...
Bug ID: 6754724 | Category: utility:proc | State: 1-Dispatched | Keywords: gse-sec-team | immutable-service-containers | Reported: 1-October-2008 | Reported against: snv_95
Last Updated: 2-October-2008

Synopsis: We should have a SMF property to change apache/mysql/squid/tomcat SMF user
Bug ID: 6715277 | Category: coolstack:packaging | State: 11-Closed | Keywords: gse-sec-team | immutable-service-containers | Reported: 17-June-2008 | Reported against: 01
Last Updated: 25-September-2009

Synopsis: RFE: Apache2 could run with reduced privileges by default
Bug ID: 6239654 | Category: utility:apache | State: 1-Dispatched | Keywords: gse-sec-team | immutable-service-containers | sst-snv-a-adhoc | Reported: 11-March-2005 | Reported against: s10u1_19 , solaris_10 , solaris_10u4
Last Updated: 22-August-2008

Synopsis: *syslogd* should run with reduced privileges
Bug ID: 6738300 | Category: utility:logger | State: 4-Defer | Keywords: gse-sec-team | immutable-service-containers | Reported: 18-August-2008 | Reported against: snv_95
Last Updated: 18-March-2009

Synopsis: {task|zone}.max-lwps should include zombie threads in count
Bug ID: 4838381 | Category: kernel:rctl | State: 3-Accepted | Keywords: gse-sec-team | immutable-service-containers | Reported: 27-March-2003 | Reported against: s10_30 , solaris_10u3
Last Updated: 6-January-2010

Synopsis: nwam doesn't bring up pseudo data-links or flows at boot time
Bug ID: 6776009 | Category: network:config | State: 10-Fix Delivered | Keywords: immutable-service-containers | Reported: 25-November-2008 | Reported against: snv_108 , osol_2009.06
Last Updated: 3-February-2010

Synopsis: memcached should run with restricted privileges
Bug ID: 6709308 | Category: database:memcached | State: 1-Dispatched | Keywords: gse-sec-team | immutable-service-containers | Reported: 31-May-2008 | Reported against: snv_91
Last Updated: 22-August-2008

Synopsis: SYSADV6: FIX error in http://docs.sun.com/app/docs/doc/816-4557/audittask-26
Bug ID: 6742688 | Category: doc:sysadmin | State: 10-Fix Delivered | Keywords: gse-sec-team | immutable-service-containers | Reported: 28-August-2008 | Reported against:
Last Updated: 3-September-2008

Synopsis: *mysql* does not honor the SMF start method user property
Bug ID: 6740584 | Category: database:mysql | State: 3-Accepted | Keywords: gse-sec-team | immutable-service-containers | Reported: 22-August-2008 | Reported against:
Last Updated: 8-September-2008

Synopsis: AUT_SUBJECT64_EX token is parsed incorrectly by audit_syslog(5) and auditreduce
Bug ID: 6914378 | Category: audit:admin | State: 7-Fix in Progress | Keywords: gse-sec-team | immutable-service-containers | Reported: 5-January-2010 | Reported against:
Last Updated: 6-January-2010

Synopsis: *c2audit* panics system when flushing non-existent policy
Bug ID: 6743863 | Category: audit:kernel | State: 10-Fix Delivered | Keywords: gse-sec-team | immutable-service-containers | punchin | Reported: 2-September-2008 | Reported against: snv_95
Last Updated: 13-May-2009

Synopsis: ppriv should be extended to have parity with C API (copying priv sets, checking priv presence)
Bug ID: 6355756 | Category: utility:proc | State: 1-Dispatched | Keywords: gse-sec-team | immutable-service-containers | ppriv | privileges | Reported: 28-November-2005 | Reported against:
Last Updated: 4-September-2008

Synopsis: Zone can be booted with ACLs that open up its root directory
Bug ID: 6760760 | Category: utility:zones | State: 6-Fix Understood | Keywords: gse-sec-team | immutable-service-containers | Reported: 17-October-2008 | Reported against: snv_95
Last Updated: 29-January-2009

Synopsis: anon_get_ptr() panic from segkp_unlock() in build 130
Bug ID: 6919266 | Category: kernel:vm | State: 1-Dispatched | Keywords: gse-sec-team | immutable-service-containers | Reported: 22-January-2010 | Reported against: snv_130
Last Updated: 22-January-2010

Synopsis: zpool destroy core dumped with FAULTED zpool
Bug ID: 6725151 | Category: utility:zfs | State: 3-Accepted | Keywords: gse-sec-team | immutable-service-containers | Reported: 11-July-2008 | Reported against:
Last Updated: 6-January-2010

Synopsis: xntpd should use privileges(5)
Bug ID: 4837090 | Category: network:ntp | State: 10-Fix Delivered | Keywords: gse-sec-team | immutable-service-containers | least-priv | Reported: 25-March-2003 | Reported against: s10 , s10_30
Last Updated: 7-June-2009

Synopsis: *c2audit* panics system when flushing non-existent policy
Bug ID: 2168260 | Category: audit:kernel | State: 10-Fix Delivered | Keywords: gse-sec-team | immutable-service-containers | punchin | Reported: 14-October-2008 | Reported against:
Last Updated: 20-May-2009

Synopsis: The files repository password history database could be relocated.
Bug ID: 6742154 | Category: pam:passwdutil | State: 3-Accepted | Keywords: gse-sec-team | immutable-service-containers | Reported: 27-August-2008 | Reported against:
Last Updated: 8-September-2008