how do u secure root password from being changed in single user boot at startup

[Santhosh.H]

At startup we can boot the system into single user mode using hpux utility and change the root password. how do u prevent this

[eran maor · Accepted solution]

Hi

the only method to do it is to convert you system to be a trusted system and to change the Boot_authentication to ask for a password in a single user mode


after you convert to a trusted system :
Within SAM you can set up the system security policies so that a
login is required when booting the system to single user.
This can be enabled as follows:
SAM --> Auditing and Security --> System security Policies -->
General User Account Policies : enable "Require login upon boot
to single user state"
The root account by default will have authority to boot the
system to single user.
You can then authorise a particular user to boot to single user
SAM --> Accounts For Users and Groups --> select the user --->
Modify Users Security Policy --> General User Account Policies
and enable " Authorize user to Boot to single-User state" .

The "Boot authentication prompt " is displayed if the "Require
login Upon Boot to single user state" is enabled and the system
is booted to single user.

[Santhosh.H]

how do u convert it into trusted system

[Santhosh.H]

tahnks got it done through SAM

[Uday_S_Ankolekar]

Hi,

You can convert system into trusted by tsconvert command.

tsconver -c will convert the system into trusted and tsconvert -r to revertback

Also you can use SAM.

Goodluck,
-USA..