Options with /etc/default/security file and TRAP

[Pierce Byrne_1]

I'm on HP-UX 11.00 and i want to know all the options that i can put into the file /etc/default/security. Is there any document that lists this. Also i can not get any man page for security on HP-UX 11.0. Is this normal.

Aslo is there an option of TRAP in the security file.

[Zigor Buruaga]

Hi,

Check this links:

http://www.unixadm.net/howto/etc-security.html

http://newfdawg.com/SHP-Articles.htm

Hope this helps.
Regards,
Zigor

[James R. Ferguson]

Hi Neil:

The only man pages for this file that I am aware of, appear at 11.11 [man security(4)]:

http://docs.hp.com/hpux/onlinedocs/B2355-90696/B2355-90696.html

Aside from that, for 11.0 your best action would be to consult the patch text for patches which deal with this file:

# PHCO_26089
# PHCO_27721

Regards!

...JRF...

[Elena Leontieva · Accepted solution]

Neil,

Here you are:

The possible options are:
ABORT_LOGIN_ON_MISSING_HOMEDIR
0 = Login with / as the home directory if the user???s home
directory does not exist.
1 = Abort the login if the user???s home directory does not
exist.
Default = 0
MIN_PASSWORD_LENGTH
N = Minimum password length for new passwords.
Untrusted systems can be 6 to 8. Trusted systems can be
6 to 80.
Default = 6
NOLOGIN
0 = Ignore the /etc/nologin file and do not exist if the file
exists.
1 = Display the contents of the /etc/nologin file and exit.
Default = 0
NUMBER_OF_LOGINS_ALLOWED
0 = Any number of logins per user are allowed.
N = Number of logins allowed per user.
Default = 0
PASSWORD_HISTORY_DEPTH
N = A new password is checked against only the N most
recent used passwords for a particular user.
Default = 1
Note: Only for trusted systems.
SU_ROOT_GROUP
GROUP = The group that a user must belong to in order
to use the su command to become root.
SU_DEFAULT_PATH
PATH = New Path applied to the PATH variable when the
su command is executed.
Default = Path is not changed.
Note: Does not affect the path of the root user.
RSH_SECURITY
0 = Compatibility with old restricted shell
1 = Relaxed. Allows setting of environmental values that
are not considered risky.
2 = Allows changing of only DISPLAY and TERM
environmental values.
PASSWORD_MIN_UPPER_CASE_CHARS
N = Minimum number of upper case characters required
in a password.
Default = 0
PASSWORD_MIN_LOWER_CASE_CHARS
N = Minimum number of lower case characters required
in a password.
Default = 0
PASSWORD_ MIN_DIGIT_CHARS
N = Minimum number of digit characters required in a
password.
Default = 0
PASSWORD_MIN_SPECIAL_CHARS
N = Minimum number of special characters required in a
password.
Default = 0
SU_KEEP_ENV_VARS
VARIABLES = Environmental variables to be passed to
the child process.
Default = Do not pass any environmental values to the
child. (Securest way to do things.)

Please note that this is not a complete list of
variables.

Elena.

[Pierce Byrne_1]

as detailed