secconfig(1)               C2 Trusted DG/UX 5.4.2T              secconfig(1)


NAME
       secconfig - get the security feature configuration

SYNOPSIS
       secconfig [-v]

       secconfig [-v] [-a | -o] securityfeature ...

   where securityfeature is:
            aa    - the system is configured to use the enhanced
                    Authentication and Authorization features of Trusted DG/UX®
            acl   - the system supports access control lists (ACL's)
            audit - the system supports auditing
            mac   - the system enforces mandatory access controls (MAC)
            priv  - the system enforces least privilege


       The securityfeature names are case insensitive.

DESCRIPTION
       secconfig when invoked without security feature arguments writes the
       text status of each security feature of the system to standard
       output.  The text status of a security feature is the security
       feature name followed by a space and the string PRESENT or ABSENT
       terminated by a newline.
       When invoked in this manner, secconfig returns the exit status 0 if
       there is no usage error.

       secconfig when invoked with security feature arguments returns an
       exit status based on the presence or absence of the specified
       security features.  The -v option additionally causes secconfig to
       display the text status of the specified security features on
       standard output.  See the description of options -a and -o below for
       details on the exit status.



   Options are:
       -a   Causes secconfig to return 0 if all of the specified security
            features are configured.  This is the default behavior when
            security features are specified.

       -o   Causes secconfig to return 0 if one of the specified security
            features is configured.

       -v   When no security feature arguments are specified, the default
            action is to write the text status of all security features to
            standard output.  -v has no effect on this behavior.

            When security feature arguments are specified, the default
            action is to write nothing to standard output.  -v causes
            secconfig to write the text status of the specified security
            features to standard output.




Licensed material--property of copyright holder(s)                         1

secconfig(1)               C2 Trusted DG/UX 5.4.2T              secconfig(1)


EXAMPLES
       % sh
       $
       $ secconfig; echo $?
       aa PRESENT
       acl PRESENT
       audit PRESENT
       mac PRESENT
       priv ABSENT
       0

       $ secconfig aa; echo $?
       0

       $ secconfig -v priv; echo $?
       priv ABSENT
       1

       $ secconfig aa acl priv; echo $?
       1

       $ secconfig -o aa priv; echo $?
       0


DIAGNOSTICS
       secconfig writes all diagnostic messages to stderr.  The secconfig
       command exits with one of the following values:

       0   The specified security features are configured.

       1   The specified security features are not configured.

       3   secconfig usage is wrong

SEE ALSO
       dgrunningwith(3C)
       sysconf(2)



















Licensed material--property of copyright holder(s)                         2