How does the Solaris Benchmark compare to YASSP, TITAN, JASS, etc?
YASSP, TITAN, and JASS are all automated tools for performing security improvements on Solaris systems. Many of the configuration steps these tools perform overlap with items from the benchmark. However, each of these tools also performs a number of security modifications which fail to meet one of the criteria which would be required for that action to be included in the benchmark document (see the answer to question 1.1 above). Conversely, the benchmark document ventures into areas (like user directory and file permissions) which are not covered by these tools. The bottom line is that YASSP, TITAN, JASS, and the Center’s benchmark documents all have different goals and different requirements. There will always be a great deal of overlap among these various projects, but never complete correspondence.
