How do I verify that I have a "trusted" system?

[Russ Park]

I have several systems being audited. A question has arisen as to what I could use to verify that C2 Security is enabled?

Thanks,
Russ

[Mel Burslan]

/usr/lbin/modprpw > /dev/null 2>&1
case $? in
2) SYSTEM="TRUSTED";;
5) SYSTEM="NON-TRUSTED";;
*) SYSTEM="UNKNOWN SECURITY LEVEL";;
esac

hope this helps

[Jim Mallett]

You can try running getprpw without any switches.

Untrusted system:
# /usr/lbin/getprpw
System is not trusted.

Trusted system:
# /usr/lbin/getprpw
usage: getprpw -r [-m option],option] [-l] [-n [domainname]] username

Jim

[DCE]

When you convert a system to trusted mode, one of the things it does is replace all the password entries in /etc/passwd with an asterisk (*), and creates a /tcb directory structure with restricted access. If these two conditions exist it is fairly cetain you have a trusted system (although password shadowing will do it as well).

You can also use the SAM selection, Auditing and Security, to tell you if the system is trusted. If the system is trusted, you can select any of the submenus - if it is not trusted, SAM will ask you if you want to convert to trusted mode. (you can cancel out)