Trust the system

[ROCK_10]

How to make trusty system

[Luk Vandenbussche]

Check this link

http://docs.hp.com/en/5991-6482/apa.html

[AwadheshPandey]

http://docs.hp.com/en/B2355-90121/index.html

[SupraTeam_1]

Hi,
Wath's your target ?

[Srinivas Thokala_1]

Follow these steps to CONVERT the system to "Trusted Mode".
1.Login as root
2. cp /etc/passwd /etc/passwd.bak
3. ll /var/adm/cron/crontabs (look for any odd named cronf files and move them elsewhere)
3. Run SAM
4. Select Auditing and Security
5. Selected Audited Events
6. Select Actions
7. Select Convert to Trusted System Now? Answer Yes
7a. If you get a message regarding vxfs file systems not currently supported by ACL's, go ahead and continue with the conversion. This statement is no longer true.
8. Select System Security Policies
9. Select General User Account Policies
10. Set unsuccessful login tries to 0
11. Exit SAM - DO NOT Turn on any rule sets at this time

Follow these steps to UNCONVERT the system from Trusted Mode and return all to normal.

1. Login as root
2. Run SAM
3. Select Auditing and Security
4. Selected Audited Events
5. Select Actions
6. Select Unconvert fromTrusted System Now? Answer Yes
7. Exit SAM

Alternate method to UNCONVERT the system from Trusted Mode:

1. Login as root
2. execute the command: /usr/lbin/tsconvert -r
3. Verify that the /etc/passwd file is returned to normal
4. Verify that the /tcb directory does not exist
5. Exit