About This Guide

“About This Guide” includes brief descriptions of the contents of this guide and an explanation of typographical conventions used, and refers you to additional sources of information you might find helpful.

This guide explains how to use the Commercial Security Pak software with Silicon Graphics® workstations and servers. It provides descriptions of those user tasks that are specific to this software.

If you have a graphics workstation, you will need to be familiar with the user documentation of the standard IRIX™ operating system, on which this product is based. See the SGI_EndUser bookshelf in your IRIS InSight™ online documentation system.

Who Should Read This Guide

You should read this guide if you have never used a secure system before or if you are encountering the Commercial Security Pak for the first time.

The Commercial Security Pak User's Guide is written for ``end users'' on Commercial Security Pak systems. Frequently, people who would consider themselves end users find themselves performing advanced administrative tasks. For those individuals, the Commercial Security Pak Administration Guide has been prepared to help both the new and experienced administrator successfully perform all operations necessary to configure and maintain security on Commercial Security Pak systems.

Accompanying Documentation

You have the entire set of standard IRIX documentation online in addition to this release. The following documents are also included as part of this release of Commercial Security Pak:

Commercial Security Pak Administrator's Guide 


This manual describes how to administer the security features at your site.

Commercial Security Pak Release Notes 


This manual describes how to install the release and lists any known problems with the implementation.

What This Guide Contains

This guide contains the following chapters:

Chapter 1, “Introduction to the Commercial Security Pak” 


Provides an overview of the Commercial Security Pak.

Chapter 2, “Understanding System Access Control” 


Provides a comprehensive overview of the responsibilities of the user and the operating system features to be used.

Chapter 3, “Understanding Auditing”  


Describes the auditing features and the user's responsibilities with respect to an audited environment.

Chapter 4, “Using CSP-Kerberos”  


Describes the tasks and procedures necessary to successfully use the CSP-Kerberos authentication system.

Chapter 5, “Programming in a Trusted Environment”  


Provides information on programming practices in a trusted environment.

Appendix A, “Computer Security Terms” 


Provides a glossary of computer security terms and concepts used in these guides and elsewhere.

Conventions Used in This Guide

These type conventions and symbols are used in this guide:

Bold 

Literal command-line arguments (options/flags).

Italics 

Executable names, filenames, glossary entries, IRIX commands, manual/book titles, new terms, program variables, tools, utilities, variable command-line arguments, and variables to be supplied by the user in examples, code, and syntax statements

Fixed-width type 


Error messages, prompts, and onscreen text

Bold fixed-width type  


User input, including keyboard keys (printing and nonprinting); literals supplied by the user in examples, code, and syntax statements (see also <>)

ALL CAPS 

Environment variables, operator names, directives, defined constants, macros in C programs

“” 

(Double quotation marks) Onscreen menu items and references in text to document section titles

() 

(Parentheses) Following function names—surround function arguments or are empty if the function has no arguments; following IRIX commands—surround reference page (man page) section numbers

[] 

(Brackets) Surrounding optional syntax statement arguments

This guide uses the standard UNIX convention for referring to entries in IRIX documentation. The entry name is followed by the section number in parentheses. For example, rcp(1C) refers to the rcp online reference page.

Additional Resources

For easy reference, here is a list of the guides and resources provided with your system and the specific focus and scope of each. You can see the guides by invoking the InSight library on your desktop or through the system toolchest, or through the iiv(1) command from a shell window.

The Silicon Graphics End User Documentation

Your IRIS InSight documentation library contains a bookshelf titled SGI_EndUser. This bookshelf contains the end user documentation for your system. Some of these books include:

  • IRIS Essentials or Desktop User's Guide

  • IRIS Glossary of Terms

  • IRIS Utilities Guide

  • Personal System Administration Guide

  • Media Control Panels User's Guide

These books have been written for standard IRIX. Where they differ from information in this book and in the Commercial Security Pak Administration Guide, the Commercial Security Pak books should be considered authoritative.

Reference Pages

The IRIX reference pages (called “man” or “manual” pages) provide concise reference information on the use of IRIX commands, subroutines, and other elements that make up the IRIX operating system. This collection of entries is one of the most important references for an administrator. Generally, each reference page covers one command, although some reference pages cover several closely related commands.

The IRIX reference pages are available online through the man command. To view a reference page, use the man command at the shell prompt. For example, to see the reference page for diff, enter:

man diff 

It is a good practice to print those reference pages you consistently use for reference and those you are likely to need before major administrative operations and keep them in a notebook.

Each command, system file, or other system object is described on a separate page. The reference pages are divided into seven sections, as shown in Table i. When referring to reference pages, this document follows a standard UNIX® convention: the name of the command is followed by its section number in parentheses. For example, cc(1) refers to the cc reference page in Section 1.

Table i shows the reference page sections and the types of reference pages that they contain.

Table 1. Outline of Reference Page Organization

Type of Reference Page

Section Number

General Commands

(1)

System Calls and Error Numbers

(2)

Library Subroutines

(3)

File Formats

(4)

Miscellaneous

(5)

Demos and Games

(6)

Special Files

(7)


Release Notes

Release notes provide specific information about the current release. Exceptions to the documentation are found in this document. Release notes are available online through the relnotes command. Each optional product or application has its own set of release notes. The grelnotes command provides a graphical interface to the release notes of all products installed on your system.

IRIX Help System

Your IRIX system comes with a help system. This system provides help cards for commonly-asked questions about basic system setup and usage. The command to initiate a help session is desktophelp.

The Silicon Graphics World Wide Web Site

The Silicon Graphics World Wide Web (WWW) presence has been established to provide current information of interest to Silicon Graphics customers. The following URL addresses are accessible to most commercially available Web browsers on the Internet:

http://www.sgi.com  


The Silicon Graphics general Web server, Silicon Surf

http://www.mips.com  


The Silicon Graphics MIPS division server

http://www.studio.sgi.com 


The Silicon Studio server

http://www.ids.sgi.com 


The InterActive Digital Solutions server

http://www.alias.com 


The Alias server

http://www.sgi.com/Technology/TechPubs  


The Silicon Graphics Technical Publications Library

From these sites you can find all the Silicon Graphics Web-published information.