here is tutorial so please read
http://www.supinfo-projects.com/fr/2005/solaris_en/
Solaris 10 offers key technologies designed to protect enterprises from internal and external attacks, while reducing the cost of management and protecting existing investments. Solaris 10 includes a variety of innovative technologies, including process and User Rights Management, N1 Grid Containers, an Automated Patch Tool and the Solaris Cryptographic Framework.
The Process Rights Management feature combined with the noexec_user_stack switch introduced in Solaris 7, provides some of the most powerful mechanisms of preventing and limiting the damage caused by hackers when they exploit application vulnerabilities. It is important to note that N1 Grid Containers have lower maximum privilege sets and for example, don't have access to devices.
The Java Desktop System is on the other hand, a nice implementation of the GNOME desktop, with many Open Source applications prebuilt and installed, with a few Sun specific tools added in for a nice bonus. The desktop itself is nice, and should feel very comfortable to any Linux user that has spent any time with any of the current distributions.
Adopting so many Linux based technologies in Solaris presents a double edged sword for Sun. It is unlikely to bring in new users, as Linux is perceived to be cheaper and offer the same basic feature set. Many of Solaris technical merits will be overlooked by the casual users.
The most notable change Sun made to Solaris 10 8/07, the official title of the update, is the addition of Solaris Containers for Linux Applications. With this update, native x86 Linux applications can now run on Solaris for x86 systems unmodified.
Sun guarantees that applications written and tested for Red Hat Enterprise Linux 3 and CentOS, the Community ENTerprise Operating System which is based on RHEL, will run in its container software, according to Dan Roberts, director of Solaris, OpenSolaris and database marketing.
Basic Privileges
● New for Solaris 10 are basic privileges.
– Not in previous Trusted Solaris implementations.
● These are things all normal users can normally do.
– proc_fork, proc_exec, proc_session,
proc_info, file_link_any
● Dropping proc_fork and proc_exec from system
daemons that should never fork or exec gives extra protection
against buffer overflow exploits that attempt to get a shell
Red Hat doesn't charge for the Linux, they charge for their support. Enterprise users don't mind paying for service/reliability. All the other distros are for us real people.