Sponsored Content
Operating Systems HP-UX Security hardening for standard HP-UX users Post 303008194 by anaigini45 on Tuesday 28th of November 2017 11:46:39 AM
Old 11-28-2017
Security hardening for standard HP-UX users

Hi,

The standard accounts that are created during the HP-UX installation, eg, bin,adm,daemon,uucp,lp,hpdb and nobody have their own shell.

Will there be any impact if we change these user's shell to /bin/false?

Like processes get interrupted, files cannot be generated, etc.

Regards
 

5 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Security Issue with Standard Input?

Hi Gang, Running a script in AIX 5.3. Users wanted me to add a "confirm you want to run script, enter 'y' or 'n'" kind of thing... here is what I came up with: #!/bin/sh myfile=`basename "$1"` dateNow=`date "+%m.%d.%Y.%H.%M.%S"` # Get current date mydatedfile=$myfile.$dateNow... (2 Replies)
Discussion started by: yall
2 Replies

2. Solaris

Hardening Solaris

What do we need to do to harden a freshly installed solaris OS? like disable telnet, no ftp for root etc...What all services you need to stop? How to check what ports are open? etc etc....please provide all tips that come to your mind...thanks:) (5 Replies)
Discussion started by: rcmrulzz
5 Replies

3. Shell Programming and Scripting

standard error to standard out question

Hi there how can i get the result of a command to not give me its error. For example, on certain systems the 'zfs' command below is not available, but this is fine becaues I am testing against $? so i dont want to see the message " command not found" Ive tried outputting to /dev/null 2>&1 to no... (5 Replies)
Discussion started by: hcclnoodles
5 Replies

4. UNIX for Dummies Questions & Answers

Redirect Standard output and standard error into spreadsheet

Hey, I'm completely new at this and I was wondering if there is a way that I would be able to redirect the log files in a directories standard output and standard error into and excel spreadsheet in anyway? Please remember don't use too advanced of terminology as I just started using shell... (6 Replies)
Discussion started by: killaram
6 Replies

5. UNIX for Dummies Questions & Answers

Pop the users one by one in sudo cat /etc/security/user

Hi Everyone, When I runthe query in ssh shell sudo cat /etc/security/user , I see half of the users cut down from the display screen. what I want to do is using the somthing like "pop" that when I hit the enter key every time the screen should move to the next user? does some one has any idea how... (4 Replies)
Discussion started by: starter2011
4 Replies
updmerge(8)						      System Manager's Manual						       updmerge(8)

NAME
updmerge - DO NOT USE THE updmerge UTILITY! SYNOPSIS
/usr/bin/updmerge [-r] directory /usr/bin/updmerge directory /usr/bin/updmerge file directory OPTIONS
Performs a recursive reinstallation of all the files and subdirectories in the /var/adm/install/update area relative to the specified directory. OPERANDS
Specifies the directory from which the reinstallation is relative, typically the root (/) directory. Specifies the name of a file in the update area, or specifies the relative pathname of that file from the update area. DESCRIPTION
Caution DO NOT USE THE updmerge UTILITY! The updmerge utility lets you merge files that have been preserved from a previous installation into a new installation environment. Any user file or customized file from a previous installation that you do not want replaced or overwritten can be saved and reintegrated into a new installation environment. You must have superuser privileges to invoke the updmerge utility, and the system must be in single-user mode. The updmerge utility must be invoked from the /var/adm/install/update directory, which is created by the updmv utility and contains entries for the files that have been preserved from the previous installation. Use the -r option followed by the directory operand to perform a recursive installation of all preserved subdirectories under the /var/adm/install/update area relative to a specific directory. Use the directory operand only to install only those preserved files directly under the /var/adm/install/update directory. This causes a non-recursive merge of the files in the specified directory. If you use the directory operand only, subdirectories in /var/adm/install/update are not merged into the new installation environment. Use the file operand followed by the directory operand to install a single preserved file. This file can be the name of the file in the /var/adm/install/update directory, or it can contain the relative pathname of that file from the /var/adm/install/update directory. If the file operand is a directory name instead of a file name, the updmerge utility reinstalls all files in that directory, but none in its subdirectories. To integrate files from the previous installation into the new installation environment, the updmerge utility compares each preserved file to the newly installed files with the following rules: If the preserved file does not exist on the system, you can view the preserved file before determining whether or not to install it. If the preserved file does exist on the system, you can view the differences between the preserved file and the newly installed file before selecting the file you want installed on the system. If a preserved file is identical to a newly installed file, a message is issued and the next file is checked. EXAMPLES
Recursively install all preserved subdirectories and files under /var/adm/install/update relative to the root (/) directory: updmerge -r / Install the preserved /etc/hosts file relative to the root (/) directory: updmerge etc/hosts / Install the preserved files in the etc directory relative to the root (/) directory (in this case, /etc): updmerge etc / RESTRICTIONS
Caution DO NOT USE THE updmerge UTILITY! You must have superuser privileges to invoke the updmerge utility. The system must be in single-user mode before you invoke the updmerge utility. The updmerge utility must be invoked from the /var/adm/install/update directory. FILES
Storage area created by the updmv utility. SEE ALSO
genufi(8), invsync(8), updmv(8), udetect(8), usync(8) stl_inv(4) updmerge(8)
All times are GMT -4. The time now is 09:46 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy