HP-UX Standard Mode Security Extensions B.11.23.
© Copyright 2001–2007 Hewlett-Packard Development Company L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents Publication History.............................................................................................................7 1 HP-UX Standard Mode Security Extensions B.11.23.02..............................................9 Announcement.......................................................................................................................................9 What’s in This Version.............................................................................................
List of Tables 1-1 1-2 1-3 1-4 Security Features and Attributes Now Available in Standard Mode............................................11 Revised Security Features and Attributes Now Also Available on a Per-User Basis....................11 New Manpages..............................................................................................................................14 Revised Manpages...............................................................................................................
Publication History To ensure that you receive the new editions, you should subscribe to the appropriate product support service. See your HP sales representative for details. You can find the latest version of this document on line at: http://www.docs.hp.com.
1 HP-UX Standard Mode Security Extensions B.11.23.02 Announcement The following information is for the HP-UX Standard Mode Security Extensions for HP-UX 11i version 2 September 2004 update and later. These security features are included in the StdModSecExt bundle which contains the TrustedMigration product. The security features include enhancements or changes to the HP-UX auditing system, passwords, and logins.
NOTE: The Standard Mode Security Extensions bundle does not change systems running in trusted mode. New in HP-UX SMSE B.11.23.02 HP-UX SMSE B.11.23.02 delivers the following new content: • When used in conjunction with HP-UX RBAC version B.11.23.04, usage of the userdbset command can be restricted based on a user’s authorizations. See userdbset(1M) for more information. • A new command, userstat, was added that displays the account status of local users.
Table 1-1 lists the security features and corresponding attributes that are now available in standard mode. These features were previously available only in trusted mode.
shadow password file for the specified user. Refer to the description of INACTIVITY_MAXDAYS in the security(4) manpage. Known Problems and Workarounds There are no known problems. Compatibility Information and Installation Requirements This section explains the installation requirements. Software Requirements The system must have standard HP-UX 11i version 2 September 2004 or later core products installed on it.
Availability in Native Languages HP-UX Standard Mode Security Extensions is currently available in English only. Installing the HP-UX Standard Mode Security Extensions Software The HP-UX Standard Mode Security Extensions software can be installed from Software Depot or from the Software Pack CD-ROM. Installing from Software Depot Follow these instructions to download the software. This installation information is also at: http://www.software.hp.com/portal/swdepot/displayInstallInfo.
Removing (uninstalling) the Product To remove or uninstall the TrustedMigration product from your HP-UX 11i version 2 September 2004 (or later) system, login as root and use the swremove command: # swremove TrustedMigration The product will be removed. Use the swlist command to verify that the TrustedMigration product was removed. The swlist command will not list TrustedMigration if it was removed.
Table 1-3 New Manpages (continued) New Manpage Description userdbset(1M) Describes the userdbset command which modifies information in the user database. Refer to userdb(4). userdb(4) Describes the user database (/var/adm/userdb) which stores per-user information. The per-user information defines behavior of certain configurable features, such as password and login restrictions. A per-user value overrides any system-wide default configured in /etc/default/security which is described in security(4).
