topic Re: Trusted System in Operating System - HP-UX

Trusted System

Shivkumar — Thu, 16 Jun 2005 12:53:59 GMT

Hey Guys,

How to determine that hpux 11i has been configured as a trusted system without login as a super user or root user ?

Thanks,
Shiv

Re: Trusted System

Jeff Schussele — Thu, 16 Jun 2005 12:56:08 GMT

Hi Shiv,

Just do an ls on /
IF there's a /tcb directory then the system is most likely trusted.
If there's not it's *definitely* not trusted.

HTH,
Jeff

Re: Trusted System

DCE — Thu, 16 Jun 2005 13:15:48 GMT

You could also perform a a cat or more on /etc/passwd. It the password field on all the entries is an asterisk(*) then the systems is probably in trusted mode (or at least password shadowing has been put in place. The existence of the /tcb directory in conjunction with the asterisk in the password field will pretty much assure you the system is in trusted mode

Re: Trusted System

A. Clay Stephenson — Thu, 16 Jun 2005 13:48:55 GMT

I would really model this test on the iscomsec() system call since that is what the system itself uses. The iscomsec() system calls looks for the file /tcb/files/auth/system/default. If found, the system is Trusted. Man iscomsec for details.

Re: Trusted System

Devesh Pant_1 — Thu, 16 Jun 2005 17:40:05 GMT

Here is another way of finding out
Check if system is trusted
/usr/lbin/getprpw
it will return â System is not trusted" or otherwise
thanks
Dev