topic Re: definition loginscreen in Operating System - HP-UX

definition loginscreen

M.J. van der Meer — Thu, 23 May 2002 13:09:16 GMT

Hi,

Where can I find a definition how a loginscreen should look like on a HP (11.11)
server in the Netherlands? This in regard to a security audit. I thought it should look like when one logs in and
then gets the "/etc/copyright" file on the screen. All suggestions are welcome.
Thanks
Martijn

Re: definition loginscreen

Bill McNAMARA_1 — Thu, 23 May 2002 13:11:45 GMT

Check /etc/profile

later,
Bill

Re: definition loginscreen

PIYUSH D. PATEL — Thu, 23 May 2002 13:13:54 GMT

Hi,

you can always edit the /etc/issue file and change how your login screen appears.

HTH,
Piyush

Re: definition loginscreen

Jeff Schussele — Thu, 23 May 2002 13:14:44 GMT

As Bill states check /etc/profile - it may be calling /etc/motd and/or /etc/copyright @ login time
If it's the console you may see /etc/issue prior to login.

Rgds,
Jeff

Re: definition loginscreen

harry d brown jr — Thu, 23 May 2002 13:15:40 GMT

cat /etc/copyright ?

If you are using Exceed you can do a screen shot.

That's why I DISPISE auditors, because they are so LAME. I'd toss the idiots out and tell them to send in a REAL Unix auditor! Next they'll probably ask you to remove the binaries from the machine?

live free or die
harry

Re: definition loginscreen

Pete Randall — Thu, 23 May 2002 13:21:34 GMT

In a security class I attended some time ago, it was recommended that /etc/issue be changed thusly:

"Unauthorized access to this computer system and software is prohibited by Title 18, United States Code, Section 1030, Fraud and Related Activity in Connection with Computers.

This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.

In the course of monitoring individuals improperly using this system, or in the case of system maintenance, the activities of authorized users may also be monitored.

Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals possible evidence of criminal activity, system personnel may provide the evidence of such monitoring to law enforcement officials."

You would obviously need to change the references to U.S. Code, but this is probably what the (darn) auditors want to see.

Good luck,
Pete

Re: definition loginscreen

Steve Steel — Thu, 23 May 2002 13:23:50 GMT

Hi

look at

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90689/B2355-90689_top.html&con=/hpux/onlinedocs/B2355-90689/00/01/180-con.html&toc=/hpux/onlinedocs/B2355-90689/00/01/180-toc.html&searchterms=login&queryid=20020523-072707

Go to www.docs.hp.com
select search this site
give 11.i login

Choose

login(1) (HP-UX 11i)
login - sign on; start terminal session
Manual Title: HP-UX Reference (Volume 1 of 9)

steve Steel

Re: definition loginscreen

Pete Randall — Thu, 23 May 2002 13:26:05 GMT

Oh yeah, it was also recommended that you change the login screen itself to not say "Welcome to hostname" by changing the
!!Dtlogin*greeting.labelString:
in /usr/dt/config/C/Xresources

Hope this helps,
Pete

Re: definition loginscreen

M.J. van der Meer — Thu, 23 May 2002 14:38:44 GMT

Thank you all for your input
Regards
Martijn