Open System Services Management and Operations Guide (G06.29+, H06.07+)

Managing Security
Open System Services Management and Operations Guide—527191-005
8-2
Administrative Files and Directories
Administrative Files and Directories
Most of the directories and files with security considerations on UNIX systems are
absent from the OSS environment. For example:
•
OSS user and group administration does not use any of the following files or
directories in the /etc directory, which can be the target of UNIX security
intruders:
groups
passwd
security
shadow
•
C functions provide access to information needed from the security database.
However, the database files themselves are not available in the OSS file system.
•
OSS administration of device access does not use files in the /dev directory that
are available on some UNIX systems, such as:
console
cua*
fd
kmem or mem
modem
ttyda or ttydfa
ttys0 through ttys9
These files also can be the target of UNIX security intruders.
•
The OSS environment does not use the following files and directories sometimes
found on UNIX systems:
°
In /etc:
aliases
dfs/dfstab
exports
ftpusers
hosts.lpd
mail/aliases or sendmail/aliases
rc, rc*, or rc?.d
shells
syslog.conf
system
ttys
tftpdaccess.cf