In his blog post "Secure administration of Oracle VM Server for SPARC (Logical Domains)" Jeff Savit describes how to use RBAC to secure an Oracle VM Server for SPARC system by eliminating use of the root userid and restricting power to specific users and roles when they need them. That step, along with restricting which userids can log into a control domain in the first place, should be considered for any domain environment, he contends.

Other tasks one may wish to consider include using RBAC to control access to guest domains consoles and to enable security auditing, he adds. OVMSS Security, Savit writes, provides the necessary separation of function that is especially critical in a virtual machine environment. He concludes that reference information for the tasks in his blog can be found in Chapter 3 of the Oracle VM Server Administration Guide.
(Get More Information . .)

"Using Sophos Anti-Virus with the Sun ZFS Storage Appliance" is an article by Thomas Hanvey that describes a scalable and reliable virus scanning solution (Sophos Anti-Virus) for protecting valuable data stored on network attached storage devices. Directions are provided for installing and configuring the solution on Microsoft Windows, Linux, and UNIX operating systems for use as a virus scan engine with the Sun ZFS Storage Appliance VSCAN service.Some of the key benefits to using this solution are that users can offload the burden of scanning the files onto the the ZFSSA, thereby reducing network traffic, while taking advantage of the ZFSSA's hardware to perform scanning of files. According to Hanvey, users can move the file scanning task to the Sun ZFS Storage Appliance, reducing network traffic, while taking advantage of the Sun ZFS Storage Appliance’s integrated VSCAN virus scanning service to manage disposition of files based on scan results from Sophos Anti-Virus. He notes that the solution has been certified by Sophos and Oracle to detect viruses, worms, and Trojan horses in files of all major file types, including mobile code and compressed file formats, ensuring fast virus resolution to reduce the risk of financial, data, and productivity loss.
(Get More Information . .)

The June 2011 Java SE Critical Patch Update Advisory alters users to 17 new security fixes across Java SE products. The affected product releases and versions are:

• JDK and JRE 6 Update 25 and earlier
• JDK 5.0 Update 29 and earlier
• SDK 1.4.2_31 and earlier

The next Oracle Java SE Critical Patch Updates will be released on October 18, 2011; February 14, 2012; and June 12, 2012.

As always, Oracle advises installation of the 17 patches in this update as soon as possible to avoid exploitation of vulnerabilities. Given the reported increase in the number of cyberattacks against Java as reported by Microsoft and noted in infosecurity-us.com these patches will be seen as timely.
(Get More Information . .)