Trusted System

[Shivkumar]

Hey Guys,

How to determine that hpux 11i has been configured as a trusted system without login as a super user or root user ?

Thanks,
Shiv

[Jeff Schussele · Accepted solution]

Hi Shiv,

Just do an ls on /
IF there's a /tcb directory then the system is most likely trusted.
If there's not it's *definitely* not trusted.

HTH,
Jeff

[DCE]

You could also perform a a cat or more on /etc/passwd. It the password field on all the entries is an asterisk(*) then the systems is probably in trusted mode (or at least password shadowing has been put in place. The existence of the /tcb directory in conjunction with the asterisk in the password field will pretty much assure you the system is in trusted mode

[A. Clay Stephenson]

I would really model this test on the iscomsec() system call since that is what the system itself uses. The iscomsec() system calls looks for the file /tcb/files/auth/system/default. If found, the system is Trusted. Man iscomsec for details.

[Devesh Pant_1]

Here is another way of finding out
Check if system is trusted
/usr/lbin/getprpw
it will return â System is not trusted" or otherwise
thanks
Dev