First, Solaris 9 comes with 61 listening ports, as shown in the analysis here
. I did the netstat on my VMware image of a completely virgin Solaris 9 system. I thought it was 60+ for TCP alone, but this is still over 10 times what Red Hat 9 was shipping with. Solaris 8 was worse, so Sun is improving.
Next, tnamed is still active on Solaris 9. From the same box:
# grep tnamed /etc/inetd.conf
name dgram udp wait root /usr/sbin/in.tnamed in.tnamed
Finally, as another poster pointed out, Sun's got a great tool in JASS, a vendor-supplied tool. And we all owe a debt to Titan, the first majorly popular Sun hardening program. YASSPis also out there for Sun.