Index: systems/HPUX/check =================================================================== RCS file: systems/HPUX/check diff -N systems/HPUX/check --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ systems/HPUX/check 26 Jun 2003 01:50:38 -0000 @@ -0,0 +1,85 @@ +#!/bin/sh +# +# tiger - A UN*X security checking system +# Copyright (C) 1993 Douglas Lee Schales, David K. Hess, David R. Safford +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2, or (at your option) +# any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# Please see the file `COPYING' for the complete copyright notice. +# +# HPUX/check - 06/25/2003 +# +# Checks for HPUX systems. +# +# 06.25.2003 - address@hidden +# +#----------------------------------------------------------------------------- +# +TigerInstallDir='.' + +# +# Set default base directory. +# Order or preference: +# -B option +# TIGERHOMEDIR environment variable +# TigerInstallDir installed location +# +basedir=${TIGERHOMEDIR:=$TigerInstallDir} + +for parm +do + case $parm in + -B) basedir=$2; break;; + esac +done + +# +# Verify that a config file exists there, and if it does +# source it. +# +[ ! -r $basedir/config ] && { + echo "--ERROR-- [init002e] No 'config' file in \`$basedir'." + exit 1 +} + +. $basedir/config + +. $BASEDIR/initdefs + +# +# If run in test mode (-t) this will verify that all required +# elements are set. +# +[ "$Tiger_TESTMODE" = 'Y' ] && { + haveallfiles BASEDIR WORKDIR || exit 1 + + echo "--CONFIG-- [init003c] $0: Configuration ok..." + exit 0 +} + +#------------------------------------------------------------------------ + +haveallfiles BASEDIR WORKDIR || exit 1 + +SYSTEMDIR=$BASEDIR/systems/HPUX +# +# The following scripts have been added to provide platform +# specific checks for HP-UX. This script was modified from +# the systems/Linux/2/check script. +# + +# Define system specific configuration variables. +Tiger_Check_Trusted=Y + +# Verify the system is running in trusted mode. +[ "$Tiger_Check_Trusted" = 'Y' ] && { + $SYSTEMDIR/check_trusted +} Index: systems/HPUX/check_trusted =================================================================== RCS file: systems/HPUX/check_trusted diff -N systems/HPUX/check_trusted --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ systems/HPUX/check_trusted 26 Jun 2003 01:50:38 -0000 @@ -0,0 +1,72 @@ +#!/bin/sh +# +# tiger - A UN*X security checking system +# Copyright (C) 1993 Douglas Lee Schales, David K. Hess, David R. Safford +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2, or (at your option) +# any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# Please see the file `COPYING' for the complete copyright notice. +# +# check_trusted: Verifies the system is running in trusted mode. + +# 06.25.2003 address@hidden +# +#----------------------------------------------------------------------------- +# +TigerInstallDir='.' + +# Set default base directory. +# Order or preference: +# -B option +# TIGERHOMEDIR environment variable +# TigerInstallDir installed location +# +basedir=${TIGERHOMEDIR:=$TigerInstallDir} + +for parm +do + case $parm in + -B) basedir=$2; break;; + esac +done + +# +# Verify that a config file exists there, and if it does +# source it. +# +[ ! -r $basedir/config ] && { + echo "--ERROR-- [init002e] No 'config' file in \`$basedir'." + exit 1 +} +. $basedir/config + +. $BASEDIR/initdefs + +# +# If run in test mode (-t) this will verify that all required +# elements are set. +# +[ "$Tiger_TESTMODE" = 'Y' ] && { + haveallfiles BASEDIR WORKDIR || exit 1 + + echo "--CONFIG-- [init003c] $0: Configuration ok..." + exit 0 +} +#------------------------------------------------------------------------ +haveallfiles BASEDIR WORKDIR || exit 1 + +echo +echo "# Verifying trusted mode..." + +/usr/lbin/getprdef -r 2>&1 >/dev/null +if [ $? -eq 4 ]; then + message WARN trust001w "" "The system is not running in trusted mode." +fi Index: doc/hpux.txt =================================================================== RCS file: doc/hpux.txt diff -N doc/hpux.txt --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ doc/hpux.txt 26 Jun 2003 01:50:38 -0000 @@ -0,0 +1,3 @@ +%trust001w +Many additional security features are available when running the +system in trusted mode.