[security-discuss] Re: Adding commands to a rights profile in Sol 10 w/TX

2006-08-03 Thread James Hardwick
I tried doing something more basic, and to me, it seems as though adding commands into a rights profile isnt working at all. I created a rights profile titled Basic Test User, which was identical to Basic Solaris User, so I could modify it and not disrupt the original. I then added the command

[security-discuss] Re: Adding commands to a rights profile in Sol 10 w/TX

2006-08-03 Thread James Hardwick
I wish I could say that helped, but it was already using /bin/ksh, and I also tried /bin/pfksh I added the rights profile to a role, and added the user to the role. I then tried the same thing but through the role rather than user, and got the same result, except the log showed the role name as

[security-discuss] Re: [osol-discuss] Re: Adding commands to a rights profile in Sol 10 w/TX

2006-08-03 Thread Scott Rotondo
Casper.Dik at sun.com wrote: >>#!/bin/csh >> Refuses to run if real and effective uids don't match. > > > #!/bin/csh -b > Runs set-uid scripts just tine Yes, to be complete I should have included csh -b. The point I wanted to emphasize, however, is that csh (with no options) will ref

[security-discuss] Re: Adding commands to a rights profile in Sol 10 w/TX

2006-08-03 Thread Scott Rotondo
James Hardwick wrote: > So I have been working in Solaris, and *nix in general recently for the > first time in a long long while. Trying to do various things which may > be easy to you guys, but not so much to me. Anyways, here goes it... > > I am currently running in Solaris 10 w/ TX, build 42

[security-discuss] User notice of last successful or last failed login

2006-08-03 Thread Everett F Batey II
Users login in an NIS domain (dtlogin or ssh) with a username and password. Some day I have to implement crypto logon (smart / activ card / identity). For NOW I MUST ensure that a local logon via dtlogin to CDE or GNOME window manager with some xterms, or, via ssh to an xterm will display the

[security-discuss] Re: New Trusted Extensions utility for managing labeled zones

2006-08-03 Thread Glenn Faden
I agree that there is a need something to put a collection of zones into the "ready" state, but I don't think the txzonemgr script should do this. Currently the script is noun- verb. But I think what you need is verb, then noun. For example, you would select the "Make Ready" verb and then get

[security-discuss] Re: New Trusted Extensions utility for managing labeled zones

2006-08-03 Thread David Gaines
I've been using txzonemgr and it is quite handy, it centralizes things nicely. I do have a question about what would be the best approach to handle changing the state of multiple zones with one command. Currently I have 12 zones, using Glenn's advice I put them in the ready state on my NFS ser