Bastille & Perl & revert issue

[Terrence]

I'm getting the following when I try use the bastille revert script.

# ./RevertBastille
Can't locate Bastille/API.pm in @INC (@INC contains: /usr/lib /opt/perl/lib/5.8.
0/PA-RISC1.1-thread-multi /opt/perl/lib/5.8.0 /opt/perl/lib/site_perl/5.8.0/PA-R
ISC1.1-thread-multi /opt/perl/lib/site_perl/5.8.0 /opt/perl/lib/site_perl . /usr
/lib/perl5/site_perl/ /usr/lib/Bastille) at ./RevertBastille line 21.

I just applied bastille and I think I activated trusted systems by mistake. I need to undo this. When I copied bastille into a depot I had to deactivate dependencies because bastille was happy with my version of Perl. But my Perl is the version that comes with 11i.

# perl -v

This is perl, v5.8.0 built for PA-RISC1.1-thread-multi
(with 1 registered patch, see perl -V for more detail)

Copyright 1987-2002, Larry Wall

Binary build 806 provided by ActiveState Corp. http://www.ActiveState.com
Built 21:44:05 May 2 2003

Any ideas on how I ca get my revert working?

Alternatively, this is a new build so the only thing that's been done with it is to apply bastille. Anyway to undo trusted systems?

I don't have a /etc/shadow file on this system, but the /etc/passwd file definitely has * in all the password blanks.

[Pat Lieberg · Accepted solution]

You can unconvert from a trusted system through SAM. Go to:

Auditing and Security
Audited Users
Actions -> Unconvert the System

[Terrence]

Much faster and far less trouble than I expected. Thanks so much!

[Robert Fritz]

Also note that the supported way to revert bastille's configuration is to use "bastille -r" not the RevertBastille script. That is the way described in the man page and docs.

The "RevertBastille" script is legacy from the Linux implimentation.