# defaults |
0|Trusted IRIX&#8482;/CMW Security Administration Guide|sgi_html/index.html
1|Front Matter|sgi_html/front.html
1|New Features in This Guide|sgi_html/pr01.html
2|New Features Documented|sgi_html/pr01.html#id5439435
2|Documentation Changes|sgi_html/pr01.html#id5439448
1|About This Guide|sgi_html/pr02.html
2|What This Guide Contains|sgi_html/pr02.html#id5179134
2|Target Audience of This Guide|sgi_html/pr02.html#id5179363
2|Related Publications|sgi_html/pr02.html#LE42145-PARENT
2|IRIX Man Pages|sgi_html/pr02.html#id5179673
2|Obtaining Publications|sgi_html/pr02.html#id5179973
2|Conventions Used in This Guide |sgi_html/pr02.html#id5177233
2|Reader Comments|sgi_html/pr02.html#id5177437
1|Chapter 1. Introduction to Trusted IRIX/CMW|sgi_html/ch01.html
2|Trusted IRIX/CMW Product Overview|sgi_html/ch01.html#LE85081-PARENT
3|What Is a Trusted System|sgi_html/ch01.html#LE85292-PARENT
3|Why Use a Trusted System|sgi_html/ch01.html#LE38761-PARENT
3|Why Use Trusted IRIX/CMW|sgi_html/ch01.html#LE50916-PARENT
4|Ease of Use|sgi_html/ch01.html#id5178116
4|Greater User-Friendliness|sgi_html/ch01.html#id5178133
4|Better Support|sgi_html/ch01.html#id5178146
2|Trusted IRIX/CMW Security Features|sgi_html/ch01.html#LE22039-PARENT
3|Identification and Authentication|sgi_html/ch01.html#LE99032-PARENT
4|Passwords Under Trusted IRIX/CMW|sgi_html/ch01.html#id5178308
4|Multilevel Login|sgi_html/ch01.html#id5178369
3|Mandatory Access Control|sgi_html/ch01.html#LE68684-PARENT
4|Sensitivity Label Components|sgi_html/ch01.html#id5178525
4|Integrity Label Components|sgi_html/ch01.html#id5178572
4|Label Name Aliases|sgi_html/ch01.html#id5178619
4|MAC Protected Passwords|sgi_html/ch01.html#id5187752
3|Discretionary Access Control|sgi_html/ch01.html#LE50244-PARENT
4|Access Control Lists|sgi_html/ch01.html#id5187862
3|System Audit Trail|sgi_html/ch01.html#LE98931-PARENT
3|Object Reuse Policy|sgi_html/ch01.html#LE77224-PARENT
2|TSIX Session Manager|sgi_html/ch01.html#LE13001-PARENT
2|Data Import/Export Restrictions|sgi_html/ch01.html#LE30355-PARENT
1|Chapter 2. Planning Your Trusted IRIX/CMW System|sgi_html/ch02.html
2|Planning Your Security Administration|sgi_html/ch02.html#LE44931-PARENT
3|Privilege Environments|sgi_html/ch02.html#LE34308-PARENT
3|System Administrator|sgi_html/ch02.html#id5188753
4|Administrator Login|sgi_html/ch02.html#id5189148
4|User MAC Labels|sgi_html/ch02.html#id5189251
4|Private Database Label (dbadmin)|sgi_html/ch02.html#id5189271
4|Public Database Label (dblow)|sgi_html/ch02.html#id5189361
4|High Clearance (msenhigh/mintequal)|sgi_html/ch02.html#id5189468
3|Auditor|sgi_html/ch02.html#id5189533
2|Creating Security Policies|sgi_html/ch02.html#LE22645-PARENT
3|Physical Security Policy|sgi_html/ch02.html#id5190081
4|System (PROM) Passwords|sgi_html/ch02.html#id5190334
3|Procedural Security Policy|sgi_html/ch02.html#id5190401
3|System Security Policy|sgi_html/ch02.html#id5190578
2|Planning for Users|sgi_html/ch02.html#LE97258-PARENT
2|Planning for Mandatory Sensitivity|sgi_html/ch02.html#LE68488-PARENT
2|Planning for Mandatory Integrity|sgi_html/ch02.html#LE34037-PARENT
2|Planning for Auditing|sgi_html/ch02.html#LE45382-PARENT
2|Planning for Networking|sgi_html/ch02.html#LE79481-PARENT
2|Using Cpusets with Trusted IRIX|sgi_html/ch02.html#LE24075-PARENT
2|Configuration Files|sgi_html/ch02.html#LE62746-PARENT
2|Identifying the System|sgi_html/ch02.html#LE84796-PARENT
2|Installation Notes|sgi_html/ch02.html#LE85088-PARENT
3|Keeping Your System Installation Trusted|sgi_html/ch02.html#id5191817
3|Regenerating the Target of Evaluation (TOE)|sgi_html/ch02.html#id5191849
2|System Administration Tools|sgi_html/ch02.html#LE86616-PARENT
3|User Information Files|sgi_html/ch02.html#id5192007
3|MAC Label Text Description File|sgi_html/ch02.html#id5192057
3|Hostname and Network Services Files|sgi_html/ch02.html#id5192073
3|Filesystem Files|sgi_html/ch02.html#id5192280
3|User Messages Files|sgi_html/ch02.html#id5192377
3|Terminal Configuration Files|sgi_html/ch02.html#id5192406
3|Auditing Files|sgi_html/ch02.html#id5192435
3|System Clock Files|sgi_html/ch02.html#id5192464
2|Deactivating a Trusted System|sgi_html/ch02.html#LE76199-PARENT
1|Chapter 3. Administering Login Accounts|sgi_html/ch03.html
2|User Accounts|sgi_html/ch03.html#LE53807-PARENT
3|Guidelines for User Accounts|sgi_html/ch03.html#id5192830
3|Creating User Accounts|sgi_html/ch03.html#id5193140
4|Administrative Accounts|sgi_html/ch03.html#id5193240
4|Creating Normal User Accounts|sgi_html/ch03.html#LE12149-PARENT
3|Removing a User|sgi_html/ch03.html#id5193796
3|Changing Clearance Information|sgi_html/ch03.html#LE72345-PARENT
2|User Groups|sgi_html/ch03.html#LE27789-PARENT
3|Guidelines for User Groups|sgi_html/ch03.html#id5194004
3|Adding a New Group|sgi_html/ch03.html#id5194199
3|Removing a Group|sgi_html/ch03.html#id5194327
1|Chapter 4. Networking with Trusted IRIX/CMW|sgi_html/ch04.html
2|Introduction to Network Security|sgi_html/ch04.html#LE65655-PARENT
2|Theory of TSIX Networking|sgi_html/ch04.html#LE45094-PARENT
3|TSIX Security Policy|sgi_html/ch04.html#id5194944
2|Trusted Network Preparation and Configuration|sgi_html/ch04.html#LE14789-PARENT
3|Label Restrictions on Network Services|sgi_html/ch04.html#id5195310
3|Creating an Interoperating Heterogeneous Network|sgi_html/ch04.html#id5195368
3|Creating a Homogeneous Network of Trusted IRIX/CMW Systems|sgi_html/ch04.html#id5195458
2|rhost.conf Database|sgi_html/ch04.html#LE31442-PARENT
3|rhost.conf File Syntax|sgi_html/ch04.html#id5195755
4|Templates in rhost.conf|sgi_html/ch04.html#id5195816
4|Individual Host Entries in rhost.conf|sgi_html/ch04.html#id5195873
4|Wildcard Entries in rhost.conf|sgi_html/ch04.html#LE26135-PARENT
3|The rhost Command|sgi_html/ch04.html#id5196170
2|Domains of Translation and Interpretation (DOT and DOI)|sgi_html/ch04.html#LE69312-PARENT
3|Domains of Translation and Heterogeneous Networks|sgi_html/ch04.html#id5196495
3|DOI/DOT Restrictions under Trusted IRIX/CMW|sgi_html/ch04.html#id5196658
3|Configuring a DOI under Trusted IRIX/CMW|sgi_html/ch04.html#id5196689
2|The inetd Network Service Daemon|sgi_html/ch04.html#LE87776-PARENT
2|Miscellaneous Trusted Network Information|sgi_html/ch04.html#LE95646-PARENT
3|The /etc/hosts.equiv and $HOME/.rhosts Files|sgi_html/ch04.html#id5197484
3|Maintaining the System Audit Trail|sgi_html/ch04.html#id5197576
3|NFS Under Trusted IRIX/CMW|sgi_html/ch04.html#id5197668
3|Using Electronic Mail|sgi_html/ch04.html#id5197696
4|Labeled Mail|sgi_html/ch04.html#LE20500-PARENT
4|Using sendmail with Trusted IRIX/CMW|sgi_html/ch04.html#id5197755
1|Chapter 5. Administering Access Control|sgi_html/ch05.html
2|Mandatory Access Control|sgi_html/ch05.html#LE22452-PARENT
2|Types of Labels|sgi_html/ch05.html#LE45270-PARENT
3|Trusted IRIX/CMW Default Labels|sgi_html/ch05.html#id5198727
3|Equal (Wildcard) Labels|sgi_html/ch05.html#id5198957
3|Administrative Labels|sgi_html/ch05.html#id5199055
3|User (CC) Labels|sgi_html/ch05.html#id5199142
4|Changing User Default Labels|sgi_html/ch05.html#id5199264
3|Multilevel Labels|sgi_html/ch05.html#id5199339
2|Working With Labels|sgi_html/ch05.html#LE84362-PARENT
3|Checking Labels|sgi_html/ch05.html#id5199593
4|Using attrinit to Clean Up Label Corruption|sgi_html/ch05.html#id5199720
3|Changing Object Labels|sgi_html/ch05.html#id5199783
3|Changing Process Labels|sgi_html/ch05.html#id5199908
3|Creating New Label Names|sgi_html/ch05.html#id5200087
3|Deleting a Label|sgi_html/ch05.html#id5200496
2|Discretionary Access Control|sgi_html/ch05.html#LE39394-PARENT
3|Trusted IRIX/CMW File Permissions|sgi_html/ch05.html#id5200693
4|Directory Permissions|sgi_html/ch05.html#id5200892
4|File Permissions|sgi_html/ch05.html#id5200984
4|Changing Permissions|sgi_html/ch05.html#id5201095
4|Setting Permissions With umask|sgi_html/ch05.html#LE36383-PARENT
2|Access Control Lists|sgi_html/ch05.html#LE51343-PARENT
3|Text Form for ACLs|sgi_html/ch05.html#LE10746-PARENT
3|Using ls -D and chacl|sgi_html/ch05.html#id5202286
2|Capability Assignment|sgi_html/ch05.html#LE95917-PARENT
1|Chapter 6. Administering the System Audit Trail|sgi_html/ch06.html
2|Audit Events in Trusted IRIX/CMW|sgi_html/ch06.html#LE53452-PARENT
2|Auditing Unexpected Use of Privilege|sgi_html/ch06.html#LE57416-PARENT
1|Chapter 7. Administering Identification and Authentication|sgi_html/ch07.html
2|Administering Passwords|sgi_html/ch07.html#LE73170-PARENT
3|Password Aging|sgi_html/ch07.html#LE80968-PARENT
3|Administering Password Generation|sgi_html/ch07.html#LE60115-PARENT
2|Login Process with the CMW Dialog|sgi_html/ch07.html#LE51004-PARENT
3|Login Failures|sgi_html/ch07.html#LE69222-PARENT
3|/etc/default/login File|sgi_html/ch07.html#LE18131-PARENT
3|/etc/shadow, /etc/passwd, /etc/clearance, and /etc/capability Files|sgi_html/ch07.html#LE51150-PARENT
2|Login Process with Telnet or Serial Terminals|sgi_html/ch07.html#LE15761-PARENT
1|Chapter 8. Trusted IRIX/CMW System Data Files|sgi_html/ch08.html
2|Home Directory Files|sgi_html/ch08.html#LE32708-PARENT
3|.rhosts|sgi_html/ch08.html#id5204898
3|.sgisession|sgi_html/ch08.html#id5205045
2|Files in the /var Directory Structure|sgi_html/ch08.html#LE24125-PARENT
3|/var/adm/lastlog/username|sgi_html/ch08.html#id5205174
3|/var/adm/SYSLOG|sgi_html/ch08.html#id5205298
3|/var/adm/oSYSLOG|sgi_html/ch08.html#id5205459
3|/var/adm/OLDsulog|sgi_html/ch08.html#id5205568
3|/var/adm/sulog|sgi_html/ch08.html#id5205726
3|/var/adm/utmp|sgi_html/ch08.html#id5205855
3|/var/adm/wtmp|sgi_html/ch08.html#id5205994
3|/var/spool/lp/pstatus|sgi_html/ch08.html#id5206157
3|/var/spool/lp/qstatus|sgi_html/ch08.html#id5206252
2|Files in the /dev Directory Structure|sgi_html/ch08.html#LE79829-PARENT
3|/dev/console|sgi_html/ch08.html#id5206420
3|/dev/klog|sgi_html/ch08.html#id5206559
3|/dev/kmem|sgi_html/ch08.html#id5206694
3|/dev/log|sgi_html/ch08.html#id5206828
3|/dev/ptc|sgi_html/ch08.html#id5206936
3|/dev/tty|sgi_html/ch08.html#id5207037
2|Files in the /etc Directory Structure|sgi_html/ch08.html#LE68693-PARENT
3|/etc/TIMEZONE|sgi_html/ch08.html#id5207189
3|/etc/aliases|sgi_html/ch08.html#id5207318
3|/etc/capability|sgi_html/ch08.html#id5207446
3|/etc/clearance|sgi_html/ch08.html#id5207714
3|/etc/cshrc|sgi_html/ch08.html#id5207971
3|/etc/exports|sgi_html/ch08.html#id5208091
3|/etc/fstab|sgi_html/ch08.html#id5208235
3|/etc/gettydefs|sgi_html/ch08.html#id5208349
3|/etc/group|sgi_html/ch08.html#id5208480
3|/etc/hosts|sgi_html/ch08.html#id5208651
3|/etc/hosts.equiv|sgi_html/ch08.html#id5208753
3|/etc/ioctl.syscon|sgi_html/ch08.html#id5208952
3|/etc/inetd.conf|sgi_html/ch08.html#id5209135
3|/etc/inittab|sgi_html/ch08.html#id5209252
3|/etc/mail/submit.cf|sgi_html/ch08.html#LE24091-PARENT
3|/etc/motd|sgi_html/ch08.html#id5209508
3|/etc/nologin  |sgi_html/ch08.html#id5209659
3|/etc/opasswd|sgi_html/ch08.html#id5209799
3|/etc/passwd|sgi_html/ch08.html#id5209974
3|/etc/profile|sgi_html/ch08.html#id5210326
3|/etc/resolv.conf|sgi_html/ch08.html#id5210446
3|/etc/rhost.conf|sgi_html/ch08.html#LE85223-PARENT
3|/etc/sendmail.cf|sgi_html/ch08.html#LE17321-PARENT
3|/etc/services|sgi_html/ch08.html#id5210838
3|/etc/shadow|sgi_html/ch08.html#id5210942
3|/etc/sys_id|sgi_html/ch08.html#id5211185
3|/etc/syslog.conf|sgi_html/ch08.html#id5211302
3|/etc/ttytype  |sgi_html/ch08.html#id5211444
2|Files in the /etc/config Directory Structure|sgi_html/ch08.html#LE42061-PARENT
3|/etc/config/acct|sgi_html/ch08.html#id5211589
3|/etc/config/automount|sgi_html/ch08.html#id5211742
3|/etc/config/automount.options|sgi_html/ch08.html#id5211859
3|/etc/config/login|sgi_html/ch08.html#id5211948
3|/etc/config/named|sgi_html/ch08.html#id5212102
3|/etc/config/network|sgi_html/ch08.html#id5212222
3|/etc/config/nfs|sgi_html/ch08.html#id5212338
3|/etc/config/rwhod|sgi_html/ch08.html#id5212498
3|/etc/config/satd.options|sgi_html/ch08.html#id5212630
3|/etc/config/sat_select.options|sgi_html/ch08.html#id5212725
3|/etc/config/syslogd.options|sgi_html/ch08.html#id5212867
3|/etc/config/timed|sgi_html/ch08.html#id5213078
3|/etc/config/timed.options|sgi_html/ch08.html#id5213201
2|Fields in the /etc/mac File|sgi_html/ch08.html#LE13857-PARENT
3|categorynames|sgi_html/ch08.html#id5213443
3|divisionnames|sgi_html/ch08.html#id5213561
3|gradenames|sgi_html/ch08.html#id5213707
3|labelnames|sgi_html/ch08.html#id5213848
3|levelnames|sgi_html/ch08.html#id5213962
3|minttypenames|sgi_html/ch08.html#id5214071
3|msentypenames|sgi_html/ch08.html#id5214168
2|Files in the /usr Directory Structure|sgi_html/ch08.html#LE77078-PARENT
3|/usr/lib/X11/xdm/Xresources|sgi_html/ch08.html#id5214284
1|Chapter 9. Administering Printing and Tape Devices|sgi_html/ch09.html
2|Printing under Trusted IRIX/CMW|sgi_html/ch09.html#LE77859-PARENT
3|Supported Printers|sgi_html/ch09.html#LE16561-PARENT
3|Labeling Printer Output|sgi_html/ch09.html#LE73876-PARENT
4|PostScript Printer Output|sgi_html/ch09.html#id5214603
4|ASCII Printer Output|sgi_html/ch09.html#id5214620
4|Printing Software|sgi_html/ch09.html#id5214634
4|Configuring a Parallel Printer under Trusted IRIX/CMW|sgi_html/ch09.html#id5214694
2|Magnetic Tape Backups|sgi_html/ch09.html#LE39249-PARENT
3|tar Backups Under Trusted IRIX/CMW|sgi_html/ch09.html#LE40936-PARENT
3|Remote Tape Drives|sgi_html/ch09.html#LE27234-PARENT
3|xfsdump and xfsrestore Under Trusted IRIX/CMW|sgi_html/ch09.html#LE29667-PARENT
1|Chapter 10. Maintaining an Evaluated Configuration|sgi_html/ch10.html
2|Hardware Configuration|sgi_html/ch10.html#LE36842-PARENT
2|Software Configuration|sgi_html/ch10.html#LE47260-PARENT
3|Use of the minthigh Integrity Label|sgi_html/ch10.html#id5215831
3|TOE Files and Programs|sgi_html/ch10.html#LE25381-PARENT
2|Administrative Configuration|sgi_html/ch10.html#LE90652-PARENT
3|Login Options|sgi_html/ch10.html#id5215994
3|Networking|sgi_html/ch10.html#id5216032
3|Filesystems|sgi_html/ch10.html#id5216055
3|Printers|sgi_html/ch10.html#id5216111
1|Index|sgi_html/ix01.html
# figures |
4|Figure 1-1. Basic Trusted IRIX/CMW Security Label Structure|sgi_html/ch01.html#id5178488
3|Figure 7-1. Trusted Path Window|sgi_html/ch07.html#id5203754
3|Figure 7-2. CMW Login Dialog Window|sgi_html/ch07.html#id5203804
# tables |
3|Table 1. Outline of Reference Page Organization|sgi_html/pr02.html#id5179804
4|Table 4-1. Label Confusion|sgi_html/ch04.html#id5196709
4|Table 4-2. Label Mismatch|sgi_html/ch04.html#id5196952
3|Table 5-1. Sample Label Relationships|sgi_html/ch05.html#id5198381
4|Table 5-2. Trusted IRIX/CMW Default Labels|sgi_html/ch05.html#id5198759
4|Table 5-3. Types and Values in the /etc/mac File|sgi_html/ch05.html#id5200239
4|Table 7-1. /etc/default/login File|sgi_html/ch07.html#id5204186
# examples |
# procedures |
# helpids |

