Is it possible to convert a Trusted System into a non trusted one?

[Enrico Venturi]

If so, by which command?

Enrico

[Pete Randall]

Enrico,

The command is tsconvert - you can also do so via SAM.


Pete

[Patrick Wallek]

# tsconvert -r

Will un-convert a trusted system.

[RAC_1]

Yes absolutely possible.

/etc/tsconvert -r

[Jean-Luc Oudart]

This thread is your solution
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=113273

Regards,
Jean-Luc

[Pete Randall]

Enrico,

Sorry, I left off the -r switch.

root# /usr/lbin/tsconvert
Creating secure password database...
Directories created.
Making default files.
System default file created...
Terminal default file created...
Device assignment file created...
Moving passwords...
secure password database installed.
Converting at and crontab jobs...
At and crontab files converted.
root# /usr/lbin/tsconvert -r
Restoring /etc/passwd...
/etc/passwd restored.
Deleting at and crontab audit ID files...
At and crontab audit ID files deleted.



Pete

[Hazem Mahmoud_3]

SAM -> Auditing & Security -> System Security Policies.

[Helen French]

Yes, tsconvert command will do it for you with the -r (reverse) option. You may not find it on the normal PATH variable, so you need to type in the absolute path:

# /usr/lbin/tsconvert -r

You can also do it from SAM

[Srinivas Thokala_1]

Do this:

Login as root
Execute the command /usr/lbin/tsconvert -r
Verify that the /etc/passwd file is retained to normal ( replacing '*' with passwd code)
Verify that the /tcb directory does not exist

Or Use SAM tool

-Srini