/etc/default/security file

[Asif_8]

Hi !
I have HP-UX11i I didn't finduot /etc/default/security in my system
and how impliments this file

asif

[Steven E. Protter]

Attaching an example.

[Geoff Wild]

Do a:

man security

As well as:

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/5187-2783/5187-2783_top.html&con=/hpux/onlinedocs/5187-2783/00/01/127-con.html&toc=/hpux/onlinedocs/5187-2783/00/01/127-toc.html&searchterms=security&queryid=20040517-105549

Rgds...Geoff

[Asif_8]

but I didn't find this file can I create my self or installed any patch

[Geoff Wild]

Yes - you create it yourself.

Rgds...Geoff

[Asif_8]

thanks !
can i also restrict remote log in by this file

[Sanjay_6]

Hi,

No, you do not restrict remote login through this file. You need to make changes to the /etc/inetd.conf file to restrict "r" commands.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B9106-90007/B9106-90007_top.html&con=/hpux/onlinedocs/B9106-90007/00/02/289-con.html&toc=/hpux/onlinedocs/B9106-90007/00/02/289-toc.html&searchterms=rlogin%7cinetd.conf&queryid=20040517-114728

Hope this helps.

Regds

[Bill Hassell]

The security file does not exist until you create it. HOWEVER, the items that work depend very much on the security patches you have and whether the system is Trusted. I've attached a sample security file with lots of comments. If you are behind on patches, some of the options will be silently ignored. The man page may not be complete so run the security_patch_checker to bring your system up to date.

Note also that this file has a restricted format! Lines that are not formatted correctly are silently ignored. Rules are:

- options must be spelled correctly and parameters must be in range for the option

- option names must start in column 1

- comments are signaled with # in column 1

- any line with a # ANYWHERE on the line causes the line to be ignored