cancel
Showing results for 
Search instead for 
Did you mean: 

enhanced security installation

Elton Agolli
Occasional Advisor

enhanced security installation

Hi all,

I have a very basic question.
Can I install Enhanced Security on a Tru64 5.1B system which is already intsalled with base security, withou making a reinstall?
I mean, can I just do a "setld OSFC2SEC540" or something?

Regards
6 REPLIES
Venkatesh BL
Honored Contributor

Re: enhanced security installation

Elton Agolli
Occasional Advisor

Re: enhanced security installation

Thanks for your reply,

But, actually it's exactly this document that makes me confuse.
I am attaching a part of it:

--------------------------------------
You can install the enhanced security subsets in the following ways:

During a full installation of the Tru64 UNIX (either advanced or basic) operating system software. A full installation brings up the system with only a root account. Run the secconfig script before adding accounts.

During an update installation if you are updating your system from a previous version of the Tru64 UNIX operating system software. During an update installation, all user accounts and databases are preserved, and running the secconfig program converts them to the enhanced security format.
-------------------------------------------

This gives me the impression that I cannot simply add the subsets after the system is installed.
What do you think?

Victor Semaska_3
Esteemed Contributor

Re: enhanced security installation

Elton,

You can use /usr/sbin/sysman.

Select Security -> Security Configuration -> click on the 'ENHANCED' buttun -> click on the 'Next >' button. Answer the rest as you want or accept the defaults.

I don't remember but a reboot may be required.

Vic

There are 10 kinds of people, one that understands binary and one that doesn't.
Elton Agolli
Occasional Advisor

Re: enhanced security installation

Victor,

I have opened security console and I have seen that there I can start with ENHANCED and some procedure after it.
But, I don't know if this will work or not, because I don't have the enhanced security subsets installed on the system.
If I do "setld -i|grep sec" I don't have the C2 subsets(OSFC2SECxxx) listed.

thnx

Elton
Victor Semaska_3
Esteemed Contributor

Re: enhanced security installation

Elton,

Then you'll 1st have to install the subset from the installation CD. It's been awhile since I've done something like that so the commands may be a little wrong. Refer to the manpages for details.

# mount -r /dev/disk/cdrom0c /mnt
# setld -l /mnt/ALPHA/BASE OSFC2SEC540

You may have to reboot before switching to enahanced security.

Vic
There are 10 kinds of people, one that understands binary and one that doesn't.
Elton Agolli
Occasional Advisor

Re: enhanced security installation

Ok, thanks Victor and everybody for your collaboration!

Regards,

Elton