System security policies

[Jonathan Caplette_1]

Hi guys,

I had some Security policies sets on my HP-UX 11.11 box. I had password aging enabled and everything sets...

For a reason I don't know, today I checked for an Audit and they are disabled all of them...

I wanna know if this can be attributed to a patch, if this is a known problem??? Or does this can only be changed by a superuser?

I know that I didn't changed it, but i'm not the only sysadmin working on that box...

Thanks
Jonathan

[James R. Ferguson]

Hi Jonathan:

Did you have an '/etc/default/security' file setup and now its gone?

Regards!

...JRF...

[Jonathan Caplette_1]

I have a securty file set up..

[Jonathan Caplette_1]

/etc/default/security is still in place with its parameters.. I only see that Security Policies are disable trought SAM

[Suraj K Sankari]

Hi,
To configure or modify security policies you need superuser or superuser equivalent user on system.
Suraj

[Ganesan R · Accepted solution]

Hi,

Since you mentioned you are not the only sysadmin then there is a possiblity of others could have changed. There are two ways we can set the security policies.

If you go to Auditing and security, the changes will be applied to all users. But you can apply policies by going through individual accounts. If someboday have changed the global settings then it will be apply to all.

Another possiblity is untrust the system. If you uncovert the system from trusted to normal through command line or SAM and again convert it then the policies needs to be re-applied.

[Jonathan Caplette_1]

guys,

Thanks for your replies... I really do suspect that someone have changed the global security settings manually since I asked the question... I found that I've that problem on a couple of boxes.... I'll find it out in the logs.

But I wanted to gather informations if someones have experienced something like that after applying a patch.

Regards
Jonathan