secconfig(1)                     DG/UX R4.11                    secconfig(1)


NAME
       secconfig - get the security feature configuration

SYNOPSIS
       secconfig [-v]

       secconfig [-v] [-a|-o] securityfeature ...

   where:
       securityfeature  One of the following tags: aa, acl, audit, cap, or
                         mac.  These tags are case-insensitive.

DESCRIPTION
       Secconfig, when invoked without security-feature arguments, writes
       the text status of each security feature of the system to standard
       output.  The text status of a security feature is the security
       feature name followed by a space and the string PRESENT or ABSENT
       terminated by a new-line character.  When invoked in this manner,
       secconfig returns the exit status 0 if there is no usage error.

       If you specify one or more security features, secconfig returns an
       exit status based on the presence or absence of the specified
       security features (see -a and -o below under Options).

       The meaning of the security-feature tags are as follows:

       aa     The system is configured to use the enhanced Authentication
              and Authorization features.

       acl    The system supports access control lists (ACLs).

       audit  The system supports auditing.

       cap    The system enforces least capability.

       mac    The system enforces mandatory access control (MAC).

   Options
       -a   Return 0 if all of the specified security features are
            configured.  This is the default behavior when security features
            are specified.

       -o   Return 0 if any one of the specified security features is
            configured.

       -v   Display the text status of the specified security features.
            This is the default when you omit securityfeature.  When you
            specify securityfeature, the default action is to write nothing
            to standard output.

EXAMPLES
       % sh
       $ secconfig; echo $?
       aa PRESENT
       acl PRESENT
       audit PRESENT
       mac PRESENT
       cap ABSENT
       0

       $ secconfig aa; echo $?
       0

       $ secconfig -v cap; echo $?
       cap ABSENT
       1

       $ secconfig aa acl cap; echo $?
       1

       $ secconfig -o aa cap; echo $?
       0

DIAGNOSTICS
       Secconfig writes all diagnostic messages to stderr.  The secconfig
       command exits with one of the following values:

       0   The specified security features are configured.

       1   The specified security features are not configured.

       3   secconfig usage is wrong.

SEE ALSO
       sysconf(2), dgrunningwith(3C).


Licensed material--property of copyright holder(s)