|
Hopefully, this page is exactly what you are looking for, but if not, you can always find further assistance on Unix/Linux Forum!
File Formats asetenv(4)
NAME
asetenv - ASET environment file
SYNOPSIS
/usr/aset/asetenv
DESCRIPTION
The asetenv file is located in /usr/aset, the default
operating directory of the Automated Security Enhancement
Tool (ASET). An alternative working directory can be speci-
fied by the administrators through the aset -d command or
the ASETDIR environment variable. See aset(1M). asetenv
contains definitions of environment variables for ASET.
There are 2 sections in this file. The first section is
labeled User Configurable Parameters. It contains, as the
label indicates, environment variables that the administra-
tors can modify to customize ASET behavior to suit their
specific needs. The second section is labeled ASET Internal
Environment Variables and should not be changed. The confi-
gurable parameters are explained as follows:
TASK This variable defines the list of
tasks that aset will execute the
next time it runs. The available
tasks are:
tune Tighten system
files.
usrgrp Check user/group.
sysconf Check system confi-
guration file.
env Check environment.
cklist Compare system files
checklist.
SunOS 5.10 Last change: 13 Sep 1991 1
File Formats asetenv(4)
eeprom Check eeprom(1M)
parameters.
firewall Disable forwarding
of IP packets.
CKLISTPATH_LOW These variables define the list of
CKLISTPATH_MED directories to be used by aset to
"small and bold">CKLISTPcreateGHa checklist file at the
low, medium, and high security lev-
els, respectively. Attributes of all
the files in the directories defined
by these variables will be checked
periodically and any changes will be
reported by aset. Checks performed
on these directories are not recur-
sive. aset only checks directories
explicitly listed in these variables
and does not check subdirectories of
them.
YPCHECK This variable is a boolean parame-
ter. It specifies whether aset
should extend checking (when appli-
cable) on system tables to their NIS
equivalents or not. The value true
enables it while the value false
disables it.
UID_ALIASES This variable specifies an alias
file for user ID sharing. Normally,
aset warns about multiple user
accounts sharing the same user ID
because it is not advisable for
accountability reason. Exceptions
can be created using an alias file.
User ID sharing allowed by the alias
file will not be reported by aset.
See asetmasters(4) for the format of
the alias file.
SunOS 5.10 Last change: 13 Sep 1991 2
File Formats asetenv(4)
PERIODIC_SCHEDULE This variable specifies the schedule
for periodic execution of ASET. It
uses the format of crontab(1)
entries. Briefly speaking, the vari-
able is assigned a string of the
following format:
minutes hours day-of-month month day-of-week
Setting this variable does not
activate the periodic schedule of
ASET. To execute ASET periodically,
aset(1M) must be run with the -p
option. See aset(1M). For example,
if PERIODIC_SCHEDULE is set to the
following, and aset(1M) was started
with the -p option, aset will run
at 12:00 midnight every day:
0 0 * * *
EXAMPLES
Example 1: Sample asetenv file showing the settings of the
ASET configurable parameters
The following is a sample asetenv file, showing the settings
of the ASET configurable parameters:
CKLISTPATH_LOW=/etc:/
CKLISTPATH_MED=$CHECKLISTPATH_LOW:/usr/bin:/usr/ucb
CKLISTPATH_HIGH=$CHECKLISTPATH_MED:/usr/lib:/usr/sbin
YPCHECK=false
UID_ALIASES=/usr/aset/masters/uid_aliases
PERIODIC_SCHEDULE="0 0 * * *"
TASKS="env sysconf usrgrp"
When aset -p is run with this file, aset is executed at
midnight of every day. The / and /etc directories are
checked at the low security level; the /, /etc, /usr/bin,
and /usr/ucb directories are checked at the medium security
level; and the /, /etc, /usr/bin, /usr/lib, and /usr/sbin
directories are checked at the high security level.
SunOS 5.10 Last change: 13 Sep 1991 3
File Formats asetenv(4)
Checking of NIS system files is disabled. The
/usr/aset/masters/uid_aliases file specifies the used IDs
available for sharing. The env, sysconf, and usrgrp tasks
will be performed, checking the environment variables, vari-
ous system tables, and the local passwd and group files.
SEE ALSO
crontab(1), aset(1M), asetmasters(4)
ASET Administrator Manual
SunOS 5.10 Last change: 13 Sep 1991 4
Man(1) output converted with
man2html and wrapped by fishsponge
This page was generated on Wed Sep 12 11:27:18 GMT 2007
|
Your favourite pages:
No pages logged yet. Trying to save cookie... Top 10 most popular pages:
sqlite3 man page (5334 hits) (openSUSE 10.2)
svn man page (5208 hits) (FreeBSD 6.2)
adv_cap_autoneg man page (4870 hits) (Solaris 10 11_06)
CPAN man page (4607 hits) (Suse Linux 10.1)
ssh man page (4342 hits) (Suse Linux 10.1)
ssh-socks5-proxy-connect man page (2877 hits) (Solaris 10 11_06)
netcat man page (2717 hits) (Suse Linux 10.1)
pprosetup man page (2487 hits) (Solaris 10 11_06)
startproc man page (2471 hits) (Suse Linux 10.1)
signal man page (2407 hits) (Suse Linux 10.1)
|