How Entrusted Database File system works

[Juan Jose Navarro]

Hello friends
I want to know how the /tcb/files/ are encrypted and hide away. It is working with file permissions? How encrypt this password? I understand that the passwd is ecnrypted with DESC (salt) in the /etc/passwd and after moved to the database
Could you help me?

[Steven E. Protter]

Shalom Juan,

All of the above.

File permissions are as tight as possible to permit login and MD5 encryption is used.

It is nearly impossible to crack a password once forgotten. Perhaps the crack utility can do it.

SEP

[Peter Godron]

Hi Juan,
and welcome to the forums !

When you convert to a Trusted System, the conversion program:

Creates a new, protected password database in /tcb/files/auth/.

Moves encrypted passwords from the /etc/passwd file to the protected password database and replaces the password field in /etc/passwd with an asterisk (*).

Forces all users to use passwords.

Creates an audit ID number for each user.

Turns on the audit flag for all existing users.

Converts the at, batch and crontab input files to use the submitterâ s audit ID.

Starting with HP-UX 11.0, changes the default value for umask to 077 (-rw-------, drwx------); see umask(1).

For the encryption question:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=958485

Please also read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33 on how to reward any useful answers given to your questions.