# defaults |
0|IRIX® Admin: Backup, Security, and Accounting|sgi_html/index.html
1|Front Matter|sgi_html/front.html
1|New Features in This Manual|sgi_html/pr01.html
1|About This Guide|sgi_html/pr02.html
2|What This Guide Contains|sgi_html/pr02.html#id5178964
3|Part I|sgi_html/pr02.html#id5178969
3|Part II|sgi_html/pr02.html#id5179037
3|Part III|sgi_html/pr02.html#id5179072
2|How to Use This Guide|sgi_html/pr02.html#id5179110
2|Related Publications|sgi_html/pr02.html#id5179201
2|Obtaining Publications|sgi_html/pr02.html#id5179373
2|Conventions|sgi_html/pr02.html#id5179475
2|Reader Comments|sgi_html/pr02.html#id5179662
1|Part I. Backup|sgi_html/pt01.html
2|Chapter 1. Planning a Backup Strategy|sgi_html/ch01.html
3|Types of Backup Media|sgi_html/ch01.html#LE82544-PARENT
3|IRIX Backup Tools|sgi_html/ch01.html#LE99153-PARENT
4|IRIX Networker|sgi_html/ch01.html#LE65399-PARENT
3|Backup Strategies|sgi_html/ch01.html#LE65800-PARENT
4|When to Back Up Data and What to Back Up|sgi_html/ch01.html#id5178166
5|Root Filesystem Backup|sgi_html/ch01.html#id5178194
5|User Filesystem Backup|sgi_html/ch01.html#id5178312
4|Incremental Backup Schedule|sgi_html/ch01.html#id5178368
4|File Backup Across a Network|sgi_html/ch01.html#id5178498
4|Automatic Backups with cron|sgi_html/ch01.html#id5178607
4|Data Migration Facility and Backup Products|sgi_html/ch01.html#LE39406-PARENT
4|Storage of Backups|sgi_html/ch01.html#LE44253-PARENT
4|How Long to Keep Backups|sgi_html/ch01.html#id5187923
4|Guidelines for Tape Reuse|sgi_html/ch01.html#id5187969
2|Chapter 2. Backup and Recovery Procedures|sgi_html/ch02.html
3|General Backup Procedure|sgi_html/ch02.html#LE48598-PARENT
4|System Backup Tools|sgi_html/ch02.html#LE75293-PARENT
3|Recovering Data After System Corruption|sgi_html/ch02.html#LE80227-PARENT
3|Changing the Default Backup Device|sgi_html/ch02.html#LE65576-PARENT
3|Saving Files Using Data Compression|sgi_html/ch02.html#LE99601-PARENT
3|Backup and Restore Utilities|sgi_html/ch02.html#LE24574-PARENT
4|Saving Data with Backup|sgi_html/ch02.html#id5189823
4|Restoring Data with Restore|sgi_html/ch02.html#id5190112
3|About dump and restore|sgi_html/ch02.html#LE37829-PARENT
4|Backing Up a Filesystem with dump |sgi_html/ch02.html#id5190477
4|Performing Incremental Backups|sgi_html/ch02.html#LE66444-PARENT
4|Recovering a Filesystem with restore |sgi_html/ch02.html#LE13343-PARENT
4|Recovering Individual Files with restore |sgi_html/ch02.html#id5190919
3|About xfsdump and xfsrestore|sgi_html/ch02.html#LE65445-PARENT
4|Features of xfsdump and xfsrestore|sgi_html/ch02.html#id5191607
4|Media Layout for xfsdump|sgi_html/ch02.html#id5191819
5|Possible xfsdump Layouts|sgi_html/ch02.html#id5192110
4|Saving Data with xfsdump|sgi_html/ch02.html#id5192316
5|Specifying Local Media with xfsdump|sgi_html/ch02.html#id5192403
5|Specifying a Remote Tape Drive with xfsdump|sgi_html/ch02.html#id5192577
5|Backing Up to a File with xfsdump|sgi_html/ch02.html#id5192722
5|Reusing Tapes with xfsdump|sgi_html/ch02.html#id5192847
5|Erasing Used Tapes|sgi_html/ch02.html#id5192984
5|About Incremental and Resumed Dumps|sgi_html/ch02.html#id5193032
5|Performing an Incremental xfsdump|sgi_html/ch02.html#id5193144
5|Performing a Resumed xfsdump|sgi_html/ch02.html#id5193255
4|Examining xfsdump Archives|sgi_html/ch02.html#LE68879-PARENT
4|About xfsrestore|sgi_html/ch02.html#LE26328-PARENT
5|Performing Simple Restores with xfsrestore|sgi_html/ch02.html#id5193846
5|Restoring Individual Files with xfsrestore|sgi_html/ch02.html#id5194146
5|Performing Network Restores with xfsrestore|sgi_html/ch02.html#id5194287
5|Performing Interactive Restores with xfsrestore|sgi_html/ch02.html#id5194408
5|Performing Cumulative Restores with xfsrestore|sgi_html/ch02.html#LE56687-PARENT
5|Interrupting xfsrestore|sgi_html/ch02.html#id5194987
5|About the housekeeping and orphanage Directories|sgi_html/ch02.html#id5195137
4|Using xfsdump and xfsrestore to Copy Filesystems|sgi_html/ch02.html#LE61361-PARENT
3|About tar|sgi_html/ch02.html#LE53826-PARENT
4|Backing Up Files with tar|sgi_html/ch02.html#id5195617
4|Using tar to Back Up Files by Modification Date|sgi_html/ch02.html#id5195643
4|Performing Incremental Backups with tar|sgi_html/ch02.html#id5195736
4|Improving tar Performance|sgi_html/ch02.html#id5195890
4|Examining tar Archives|sgi_html/ch02.html#id5195926
4|Restoring tar Archives|sgi_html/ch02.html#id5196235
3|About cpio|sgi_html/ch02.html#LE85662-PARENT
4|Backing Up Files with cpio|sgi_html/ch02.html#id5196536
4|Using cpio to Back Up Files by Modification Date|sgi_html/ch02.html#id5196612
4|Performing Incremental Backups with cpio|sgi_html/ch02.html#id5196684
4|Examining cpio Archives|sgi_html/ch02.html#id5196873
4|Restoring cpio Archives|sgi_html/ch02.html#id5196977
3|About dd|sgi_html/ch02.html#LE90789-PARENT
2|Chapter 3. Troubleshooting Backup and Recovery|sgi_html/ch03.html
3|Troubleshooting Unreadable Backups|sgi_html/ch03.html#LE71748-PARENT
3|Reading Media from Other Systems|sgi_html/ch03.html#LE47329-PARENT
3|Troubleshooting Errors During Backup|sgi_html/ch03.html#LE79992-PARENT
3|Restoring the Correct Backup after the Wrong One|sgi_html/ch03.html#LE59012-PARENT
3|Testing for Bad Media|sgi_html/ch03.html#LE96554-PARENT
3|Backup and Recovery Error Messages and Actions|sgi_html/ch03.html#LE63578-PARENT
1|Part II. Security|sgi_html/pt02.html
2|Chapter 4. IRIX System Security|sgi_html/ch04.html
3|About System Security|sgi_html/ch04.html#LE59221-PARENT
3|Standard Security Features|sgi_html/ch04.html#LE95533-PARENT
3|Security Safeguards and Cautions|sgi_html/ch04.html#LE69861-PARENT
3|Password Administration|sgi_html/ch04.html#LE75080-PARENT
4|Guidelines for Devising Passwords|sgi_html/ch04.html#LE37825-PARENT
4|About PROM Passwords|sgi_html/ch04.html#LE48777-PARENT
5|Clearing the PROM Password Using nvram|sgi_html/ch04.html#id5200413
5|Setting the PROM Password from the Command Monitor|sgi_html/ch04.html#id5200472
4|Establishing Second (Dialup) Passwords|sgi_html/ch04.html#LE46500-PARENT
4|About Shadow Passwords|sgi_html/ch04.html#LE53045-PARENT
5|Using a Shadow Password File|sgi_html/ch04.html#id5201196
4|About Password Aging|sgi_html/ch04.html#LE75421-PARENT
5|Controlling Password Aging with the passwd Command|sgi_html/ch04.html#id5201317
5|Controlling Password Aging by Editing /etc/passwd|sgi_html/ch04.html#id5201483
4|Using pwck to Check the Password File|sgi_html/ch04.html#LE38605-PARENT
3|System Login and Account Administration|sgi_html/ch04.html#LE31913-PARENT
4|About Special Accounts|sgi_html/ch04.html#LE47273-PARENT
4|Locking Unused Logins|sgi_html/ch04.html#LE68670-PARENT
4|System Login Options|sgi_html/ch04.html#LE84964-PARENT
5|Restricting root Logins|sgi_html/ch04.html#id5202960
5|Restricting Login Attempts (MAXTRYS)|sgi_html/ch04.html#id5203024
5|Setting a Time Period to Disable a Line (DISABLETIME)|sgi_html/ch04.html#id5203191
5|Recording Login Attempts|sgi_html/ch04.html#id5203241
5|Forcing a Password|sgi_html/ch04.html#id5203336
5|Disabling Accounts (LOCKOUT)|sgi_html/ch04.html#id5203416
5|Displaying the Last Login Time|sgi_html/ch04.html#id5203468
3|About Set-UID and Set-GID Permissions|sgi_html/ch04.html#LE43095-PARENT
4|Checking for Set-UID Files Owned by root|sgi_html/ch04.html#id5203629
4|Checking for Set-UIDs in the root Filesystem|sgi_html/ch04.html#id5203710
4|Checking Set-UIDs in Filesystems Other Than root|sgi_html/ch04.html#id5203890
3|About General File and Directory Permissions|sgi_html/ch04.html#LE48436-PARENT
3|/etc/shells database|sgi_html/ch04.html#LE34266-PARENT
3|Accounts Shipped Without Passwords|sgi_html/ch04.html#LE72006-PARENT
3|Security File and Command Reference|sgi_html/ch04.html#LE13168-PARENT
3|Enhanced Security Features|sgi_html/ch04.html#LE98181-PARENT
4|Access Control Lists (ACLs)|sgi_html/ch04.html#id5205186
5|Long ACL Text Form|sgi_html/ch04.html#LE79093-PARENT
5|Short ACL Text Form|sgi_html/ch04.html#id5205864
5|Using ls -D and chacl|sgi_html/ch04.html#id5205991
4|Least-Privilege Capabilities|sgi_html/ch04.html#id5206233
5|The /etc/capability File|sgi_html/ch04.html#id5206306
5|Capabilities in This Release|sgi_html/ch04.html#LE22786-PARENT
5|File Capabilities|sgi_html/ch04.html#id5208252
5|Creating Custom Capabilities|sgi_html/ch04.html#id5208390
5|Using attrinit to Clean Up Capability Corruption|sgi_html/ch04.html#id5208436
3|Pluggable Authentication Modules|sgi_html/ch04.html#LE16135-PARENT
2|Chapter 5. Network Security|sgi_html/ch05.html
3|Local Area Network Access|sgi_html/ch05.html#LE21803-PARENT
4|Network Access Control Files|sgi_html/ch05.html#id5208834
4|Local inetd Services|sgi_html/ch05.html#id5209203
4|X11 Network Access|sgi_html/ch05.html#id5209287
5|Security and X Server Initialization|sgi_html/ch05.html#LE44227-PARENT
5|Limiting Access with the X0.hosts File|sgi_html/ch05.html#id5209446
5|Limiting Access with the xhost Command|sgi_html/ch05.html#LE34430-PARENT
5|Interactive Use of the xhost Command|sgi_html/ch05.html#id5209693
5|X Authority|sgi_html/ch05.html#id5209838
3|About Network Security and Firewalls|sgi_html/ch05.html#LE66837-PARENT
4|About the Internet|sgi_html/ch05.html#id5209949
4|Network Security Issues|sgi_html/ch05.html#id5210034
4|About Firewalls|sgi_html/ch05.html#LE54586-PARENT
4|Firewall Design Philosophy|sgi_html/ch05.html#id5210249
4|Monitoring the Firewall|sgi_html/ch05.html#id5210411
4|World Wide Web Security Issues|sgi_html/ch05.html#id5210533
3|Hardware Configuration for Firewalls|sgi_html/ch05.html#LE24996-PARENT
4|Routers and Firewalls|sgi_html/ch05.html#id5210622
4|Hardware Configurations for Use as Firewalls|sgi_html/ch05.html#id5210778
5|Dual-Homed Host Firewall|sgi_html/ch05.html#id5210792
5|Screened Host Gateway|sgi_html/ch05.html#id5210874
3|IRIX Configuration for Security|sgi_html/ch05.html#LE40397-PARENT
4|Network Software Setup on a Dual-Homed Host|sgi_html/ch05.html#id5211104
4|Tightening Security in IRIX|sgi_html/ch05.html#id5211162
5|Disabling Forwarding of IP Packets|sgi_html/ch05.html#LE10730-PARENT
5|Limiting inetd Services|sgi_html/ch05.html#LE75595-PARENT
5|Password Protection on the Firewall|sgi_html/ch05.html#id5211975
5|Limiting rpc Services Access on the Firewall|sgi_html/ch05.html#id5212059
5|Disabling NIS (YP) on the Firewall|sgi_html/ch05.html#LE58392-PARENT
5|Disallowing NFS Access on the Firewall|sgi_html/ch05.html#LE75265-PARENT
5|About Log Files on the Firewall|sgi_html/ch05.html#id5212466
5|Checking Software Integrity on the Firewall|sgi_html/ch05.html#id5212510
5|Educating Users About the Firewall|sgi_html/ch05.html#id5212582
3|Internal Network Security Configuration|sgi_html/ch05.html#LE92547-PARENT
4|Domain Name System (DNS) Security Guidelines|sgi_html/ch05.html#id5212774
4|Mail Configuration Security Guidelines|sgi_html/ch05.html#id5212823
5|Sendmail Configuration and Mail Aliases|sgi_html/ch05.html#id5212878
5|Mail Spool Isolation|sgi_html/ch05.html#id5212969
4|About Proxy Servers|sgi_html/ch05.html#LE40558-PARENT
4|Secure RPC|sgi_html/ch05.html#LE19156-PARENT
1|Part III. Accounting|sgi_html/pt03.html
2|Chapter 6. Administering the System Audit Trail|sgi_html/ch06.html
3|About MACs and DACs|sgi_html/ch06.html#LE52560-PARENT
3|Enabling Auditing|sgi_html/ch06.html#LE32265-PARENT
3|Default Auditing|sgi_html/ch06.html#LE79796-PARENT
3|Customizing Auditing|sgi_html/ch06.html#LE77858-PARENT
4|Auditable Actions|sgi_html/ch06.html#id5214147
4|Auditable Events|sgi_html/ch06.html#LE63445-PARENT
4|About satconfig|sgi_html/ch06.html#LE43901-PARENT
5|Using satconfig|sgi_html/ch06.html#id5216417
4|About sat_select|sgi_html/ch06.html#LE61964-PARENT
5|Using sat_select|sgi_html/ch06.html#id5216573
4|Saving and Retrieving Your Auditing Environment|sgi_html/ch06.html#LE20065-PARENT
4|Placing the Audit Files|sgi_html/ch06.html#LE13988-PARENT
4|Auditing a Specific User|sgi_html/ch06.html#LE96958-PARENT
5|Auditing to Determine Security Violations|sgi_html/ch06.html#id5217199
5|Auditing a User's Activities|sgi_html/ch06.html#id5217282
4|Auditing a File|sgi_html/ch06.html#LE66461-PARENT
4|Auditing a Label Under Trusted IRIX|sgi_html/ch06.html#LE31906-PARENT
3|About the Audit Data|sgi_html/ch06.html#LE33289-PARENT
3|About Security Violations|sgi_html/ch06.html#LE45356-PARENT
4|System Use and Abuse by Outside Users|sgi_html/ch06.html#id5217983
5|Attempts at Unauthorized System Entry|sgi_html/ch06.html#id5218037
5|System Use at Unusual Hours or from Unusual Locations|sgi_html/ch06.html#id5218166
5|Connections with Machines Outside the Local Network|sgi_html/ch06.html#id5218305
4|System Use and Abuse by Inside Users|sgi_html/ch06.html#id5218473
5|File Permission Violations by Inside Users|sgi_html/ch06.html#id5218549
5|Unexpected Use of Root Privilege by Inside Users|sgi_html/ch06.html#id5218723
5|Activity by Particular Inside Users|sgi_html/ch06.html#id5218905
5|Access to Particular Files or Resources|sgi_html/ch06.html#id5218989
4|About Proper and Improper System Management|sgi_html/ch06.html#id5219035
5|Modifications of System Data Files|sgi_html/ch06.html#id5219098
5|Modifications of System Program Attributes|sgi_html/ch06.html#id5219220
5|Manipulation of the Audit Trail|sgi_html/ch06.html#id5219380
3|Archiving Audit Data|sgi_html/ch06.html#LE37238-PARENT
4|Removing Audit Data|sgi_html/ch06.html#LE96299-PARENT
4|About Audit File Overflow|sgi_html/ch06.html#id5219567
5|Recovering from Audit File Overflow|sgi_html/ch06.html#id5219608
2|Chapter 7. System Accounting|sgi_html/ch07.html
3|About the Process Accounting System|sgi_html/ch07.html#LE82936-PARENT
4|Parts of the Process Accounting System|sgi_html/ch07.html#id5220054
4|Turning On Process Accounting|sgi_html/ch07.html#LE24663-PARENT
4|Turning Off Process Accounting|sgi_html/ch07.html#id5220476
3|Accounting Files and Directories|sgi_html/ch07.html#LE11956-PARENT
4|Accounting File Size Control|sgi_html/ch07.html#LE19570-PARENT
4|Files in the /var/adm Directory|sgi_html/ch07.html#id5220784
4|Files in the /var/adm/acct/nite Directory|sgi_html/ch07.html#id5220933
4|Files in the /var/adm/acct/sum Directory|sgi_html/ch07.html#id5221518
4|Files in the /var/adm/acct/fiscal Directory|sgi_html/ch07.html#id5221793
3|About Daily System Accounting|sgi_html/ch07.html#LE72742-PARENT
4|Setting Up the Accounting System|sgi_html/ch07.html#id5222108
3|Daily System Accounting with runacct|sgi_html/ch07.html#LE26631-PARENT
4|runacct Summary Files|sgi_html/ch07.html#id5222352
4|runacct Reentrant States|sgi_html/ch07.html#id5222681
4|Recovering from runacct Failures|sgi_html/ch07.html#id5223150
4|Restarting runacct|sgi_html/ch07.html#id5223526
4|Fixing Corrupted Accounting Files|sgi_html/ch07.html#id5223609
5|Fixing wtmp Errors|sgi_html/ch07.html#id5223623
5|Fixing tacct Errors|sgi_html/ch07.html#id5223781
4|Updating Holidays for Accounting|sgi_html/ch07.html#LE28716-PARENT
4|Daily runacct Reports|sgi_html/ch07.html#id5224125
5|Daily Usage Report|sgi_html/ch07.html#id5224350
5|Daily Command and Monthly Total Command Summaries|sgi_html/ch07.html#id5224567
3|IRIX Extended Accounting|sgi_html/ch07.html#LE42770-PARENT
4|About Extended Accounting|sgi_html/ch07.html#id5224899
4|Using Extended Accounting|sgi_html/ch07.html#id5225069
4|Array Sessions|sgi_html/ch07.html#id5225235
4|Project IDs|sgi_html/ch07.html#id5225377
1|Index|sgi_html/ix01.html
# figures |
6|Figure 2-1. Single Dump on Single Media Object|sgi_html/ch02.html#id5192157
6|Figure 2-2. Single Dump on Multiple Media Objects|sgi_html/ch02.html#id5192198
6|Figure 2-3. Multiple Dumps on Single Media Object|sgi_html/ch02.html#id5192261
6|Figure 2-4. Multiple Dumps on Multiple Media Objects|sgi_html/ch02.html#id5192296
5|Figure 5-1. A Simple Firewall Environment|sgi_html/ch05.html#id5210210
6|Figure 5-2. Screened Host|sgi_html/ch05.html#id5210925
6|Figure 5-3. Screened Subnet|sgi_html/ch05.html#id5211025
# tables |
4|Table 1-1. Backup Utilities Summary|sgi_html/ch01.html#id5177597
4|Table 2-1. Filesystems and Dump Utilities|sgi_html/ch02.html#id5191375
4|Table 2-2. Filesystems and Restore Utilities|sgi_html/ch02.html#id5191486
5|Table 2-3. tar File Comparison Key Characters|sgi_html/ch02.html#id5196024
6|Table 4-1. Password Aging Character Codes|sgi_html/ch04.html#id5201627
4|Table 4-2. IRIX Security Files|sgi_html/ch04.html#id5204471
4|Table 4-3. IRIX Security Commands|sgi_html/ch04.html#id5204711
4|Table 6-1. Events Audited by Default|sgi_html/ch06.html#id5213605
# examples |
# procedures |
# helpids |

