~/.rhosts

This file contains a list of hosts from which this user is allowed to initiate a remote session without additional authentication.

command hostname username

dblow

-rw-r--r-- (644) root,sys

/var/adm/OLDsulog

This file is used for backups of the sulog file.

Each entry in OLDsulog has the following form:

SU 09/09 10:21 + ttyq2 invoking user-new identity 

dbadmin

-rw------- (600) admin,admin

/var/adm/sulog

This file contains a log of all uses of the su(1) command.

Each entry in sulog has the following form:

SU 09/09 10:21 + ttyq2 invoking user-new identity 

dbadmin

-rw------- (600) admin,admin

/dev/console

The console provides the operator interface to the system. The operating system and system utility programs display error messages on the system console.

The console is a logical terminal represented by a text window on the graphics monitor.

The evaluated configuration does not support the option of using a serial terminal.

The device special file /dev/console represents the system console. /dev/console is the slave side of pseudo-tty (see pty(7)).

Special Device File

dblow

crw--w--w- (622) root,sys

/dev/klog

The /dev/klog file is the kernel error logging interface. When this device is open, messages printed by the kernel, which normally appear only in the system console window, also are buffered by the klog driver. The messages obtained by reading from this driver are the text of the kernel error messages.

Normally, this device is opened and read by syslogd(1M), the system logging daemon.

Special device file.

dblow

crw-r--r-- (644) root,sys

/dev/kmem

/dev/kmem is a special file that is an image of the kernel virtual memory of the computer. It may be used, for example, to examine, and even to patch the system memory.

dblow

crw-r----- (640) root,sys

/dev/log

This file is a named pipe that is read by syslogd(1m) as a source of system log messages. If a program writes error messages to /dev/log, syslogd receives the messages and places them in the system log.

Named pipe.

dblow

prw-rw-rw- (666) root,sys

/dev/ptc

This file is the master pseudo-terminal.

dblow

crw-rw-rw- (666) root,sys

/dev/tty

This file is, in each process, a synonym for the control terminal associated with the process group of that process, if any.

dblow

crw-rw-rw- (666) root,sys

/etc/TIMEZONE

This file contains the time zone (for example, EST), the hours of difference between the time zone and Greenwich time zone (for example, 5), and the alternative time zone (for example, EDT). All the information is in one line without any field separators.

TZ=<timezone><hours_from_GMT><daylight_timezone>

dblow

-rw-r--r-- (644) root,sys

/etc/capability

This file specifies the system-file editing permissions for each account on your system. This file contains the following information for each account:

The following is a sample capability file:

root:all+eip:all+eip
sysadm:all=:all=
auditor:CAP_AUDIT_WRITE,CAP_AUDIT_CONTROL,CAP_KILL+eip
dbadmin:all=:all=
ernie:all=:CAP_FOWNER,CAP_SETFCAP+eip
casey:all=:all+eip

dbadmin

-rw-r--r-- (644) dbadmin,sys

/etc/clearance

This is the user label file. This file contains the following information for each user:

The following is a sample clearance file:

root:dblow:dblow...dbadmin
bill:userlow:userlow...userhigh

dbadmin

-rw-r--r-- (644) dbadmin,sys

/etc/cshrc

This file is the prototype .cshrc.

This file contains a sample of C-shell initialization commands. It is used as the default set of commands.

dblow

-rwxr-xr-x (755) root,sys

/etc/gettydefs

This file contains information used by getty(1M) to set up the speed and terminal settings for a serial line. This file supplies information on what the login(1) prompt should look like. It also supplies the speed to try next if the user indicates the current speed is not correct by typing a break character.

label# initial-flags # final-flags # login-prompt #next-label

dblow

-rw-r--r-- (644) root,sys

/etc/group

This file is the definition file for user groups on the system.

groupname:epasswd:GID:[user1,user2]

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/passwd

/etc/hosts

This file contains information regarding the known hosts on the network.

IP-address hostname alias[es]

dbadmin

-rw-r--r-- (644) dbadmin,sys

/etc/hosts.equiv

This file contains a list of trusted hosts. When an rlogin(1C), rcp(1C), or rsh(1C) request from a listed host is made, and the initiator of the request is also listed in the /etc/passwd file, no further validity checking is done as long as the login name and UID number of the user on the remote host are identical to the listing in the local /etc/passwd file. If these conditions are met, rlogin does not prompt for a password, and rcp, and rsh complete successfully. So a remote user is “equivalenced” to a local user with the same user name and UID number when the remote user's host name is found in hosts.equiv.

hostname

dblow

-rw-r--r-- (644) root,sys

/etc/ioctl.syscon

This file defines the state of the console device. When init comes up at boot time, and whenever it switches out of single-user state to normal run states, it sets the ioctl(2) states of the virtual console, /dev/console, to those modes saved in the file /etc/ioctl.syscon. This file is written by init whenever the single-user state is entered.

d26:1805:8bf:3b:0:3:1c:8:18:4:0:0:0:0:0:0

dblow

-rw-r--r-- (644) root,sys

init

init

/etc/inittab

This file supplies the script to init's role as a general process dispatcher. The majority of init's process dispatching activity involves creating instances of the terminal line process, /etc/getty. Other processes typically dispatched by init are daemons and shells.

id:rstate:action:process

dblow

-rw-r--r-- (644) root,sys

/etc/motd

This file is used for the “Message of the Day.” The System Administrator can freely edit this file. The /etc/motd file is displayed each time a user logs in.

ASCII text file.

dblow

-rw-r--r-- (644) root,sys

/etc/nologin

If the file is present, remote user logins via the network are not permitted.

There is no syntax to this file. The existence of the file is all that is required.

dblow

-r--r--r-- (0444) root,sys

login

login

/etc/opasswd

This file is a backup copy of /etc/passwd.

username:e_passwd[,Mmww|lock_char]:UID:GID:GECOS: $HOME:$SHELL

dblow

-rw-r--r-- (644) root,sys

/etc/passwd

This file contains information about the user. Unlike standard IRIX, the encrypted password is not stored in this file. The encrypted password is kept in /etc/shadow. The passwd file contains the following information for each user:

username::UID:GID:GECOS: $HOME:$SHELL

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/profile

This file is the prototype shell environment command file for use with /bin/sh. Commands in this file are executed when the shell starts up.

ASCII text file.

dblow

-rw-r--r-- (644) root,sys

/etc/rhost.conf

This file is the configuration file for the remote login and remote shell programs. It specifies the parameters under which remote logins and shells are allowed on your system from systems that share your security policy and those that do not. Default capability sets and allowed login labels are specified here.

dblow

-rw-r--r-- (644) root,sys

/etc/services

The /etc/services file contains information regarding the known services available in the Internet.

Example syntax:

smtp 25/tcp mail

dblow

-rw-r--r-- (644) root,sys

/etc/shadow

This is the user password file. This file contains the following information for each user:

The following is a sample shadow file:

root:kEXFeXFTPoxE
bill:6k/7KCFRPNVXg,z/

dbadmin

-rw-r--r-- (644) dbadmin,sys

/etc/syslog.conf

This file directs the system log daemon (syslogd) to log messages in a given set of files. Each log message in a logfile is one line. For more information about this file, see the syslogd(1m) reference page.

An example syslog.conf file:

kern.debug |/usr/adm/klogpp /usr/adm/SYSLOG
kern.debug |/usr/adm/klogpp /dev/console 
daemon,auth,syslog,lpr.debug /usr/adm/SYSLOG 
kern.err @ginger 
*.emerg * 
*.alert eric,beth 
*.alert;auth.warning ralph

dblow

-rw-r--r-- (644) root,sys

/etc/ttytype

This file contains a list of the tty ports on the system, and for each port, the kind of terminal that is attached to it.

Example:

iris-ansi console 
iris-ansi systty 
vt100 ttyd1 
?h19 ttyd2 
?h19 ttyd3 
?v50am ttyd4 
?v50am ttyd5 
?v50am ttyd6 
?v50am ttyd7 
?v50am ttyd8 
?v50am ttyd9 
?v50am ttyd10 
?v50am ttyd11 
?v50am ttyd12

dblow

-rw-r--r-- (644) root,sys

/etc/utmp

This file holds user information for such commands as who(1), write(1), and login(1) For more information about this file, see the reference page utmp(4).

Example:

struct utmp { 
char ut_user[8]; /*User login name*/ 
char ut_id[4]; /*/etc/inittab id usually line #)*/
char ut_line[12]; /* device name (console,lnxx)*/
short ut_pid; /*process id*/ 
short ut_type; /* type of entry */ 
struct exit_status { 
~~~~short ~~~~e_termination;/*termination status*/ 
~~~~short ~~~~e_exit; /* Process exit status */ 
}ut_exit; /*exit status of a process marked */ 
/* as a DEAD_PROCESS.*/ 
time_t ut_time; /* time entry was made */ 
};

dblow

-rw-rw-r-- (664) adm,adm

/etc/wtmp

This file contains one record per username with related information: inittab ID, device name connected to, process ID, type of entry (for example, a login process), exit status, and time the entry was made. For more information about this file, see the reference page utmp(4).

Example:

struct utmp { 
char ut_user[8]; /* User login name */ 
char ut_id[4]; /*/etc/inittab id usually line #*/
char ut_line[12]; /* device name (console,lnxx) */ 
short ut_pid; /* process id */ 
short ut_type; /* type of entry */ 
struct exit_status { 
~~~~short ~~~~e_termination;/*termination status*/
~~~~short ~~~~e_exit; /* Process exit status */ 
} ut_exit; /* The exit status of a process marked as DEAD_PROCESS. */ 
time_t ut_time; /* time entry was made */ 
};

dblow

-rw-rw-r-- (664) adm,adm

/etc/config/acct

This file contains either the word “on” or “off”. If it contains “on”, process accounting is turned on by default. If it contains the word “off”, process accounting is not run by default.

The word “on” or “off.”

dblow

-rw-r--r-- (644) root,sys

/etc/config/automount

This file is used by the system to direct NFS to automatically mount network filesystems or not to mount them.

The word “on” or “off.”

dblow

-rw-r--r-- (644) root,sys

/etc/config/dbedit

This file is used by the system to list the files on which dbedit(1M) should be used and the shortname aliases dbedit accepts for those files.

pathname shortname(s)

dblow

-rw-r--r-- (644) root,sys

/etc/config/login.options

This file controls the default actions of the login program, such as the number of unsuccessful attempts to log in or the timeout period while waiting for a password. This file is described in the login(4) reference page.

Example:

maxtries=5
disabletime=30
passwdreq

dblow

-rw-r--r-- (644) root,sys

/etc/config/named

This file directs the system to spawn or not to spawn the named(1m) domain name server.

The word “on” or “off.”

dblow

-rw-r--r-- (644) root,sys

/etc/config/network

This file is used by the system to direct NFS to spawn the lock and status daemons or not to spawn them.

The word “on” or “off.”

dblow

-rw-r--r-- (644) root,sys

/etc/config/nfs

This file is used by the system to start the NFS daemons and mount the network filesystems.

The word “on” or “off.”

dblow (MSEN_LOW_LABEL/MINT_HIGH_LABEL)

-rw-r--r-- (644) root,sys

init

/etc/config/rwhod

This file directs the system to spawn or not to spawn the rwhod(1m) server daemon.

The word “on” or “off.”

dblow

-rw-r--r-- (644) root,sys

/etc/config/satd.options

This file contains saved satd options. A flag to satd fills this file with the current satd options.

dblow

-rw-r--r-- (644) root,sys

/etc/config/sat_select.options

This file contains saved options to sat_select. A flag to sat_select fills this file with the current sat_select options.

dblow

-rw-r--r-- (644) root,sys

/etc/config/syslogd.options

This file contains command line options for the syslogd(1m) program. syslogd reads and logs messages into a set of files.

Optional site-specific flags belong in the options file. The available flags are:

-f – Specify an alternate configuration file.

-m – Select the number of minutes between mark messages.

-d – Turn on debugging.

-p – Use the given name for the named pipe instead of /dev/log.

dblow

-rw-r--r-- (644) root,sys

/etc/config/timed

This file directs the system to spawn or not to spawn the timed(1m) clock controlling daemon.

The word “on” or “off.”

dblow

-rw-r--r-- (644) root,sys

/etc/mac_label/categorynames

This file associates a human readable text name with the category number. Typically, the category number is used to identify projects or areas (categories) of information. A category allows labels to have the same sensitivity level (such as “proprietary”) but different security labels by having different categories (such as a category named “cashew” and a category named “pistachio”).

A categorynames file might look like:

black:10 
blue:11 
green:63 
lavender:110 
orange:140 
pink:150 
purple:151 
red:170 
violet:210 
white:220

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/mac_label/divisionnames

This file associates a human readable text name with the division number. The division number is a non-hierarchical value that indicates a grade type that this label includes. Typically, the division number is used to identify projects or areas (categories) of integrity. A division allows labels to have the same grade (such as “highest grade”), and to have different security labels by having different divisions (such as a division named “huguenots” and a division named “papists”).

A divisionnames file might look like this:

IRIXdbadmin:1 
IRIXsuperuser:2 
IRIXinit:3
“apple pie”:101 
cake:120 
chocolate:121 
cookie:122 
custard:124 
fudge:150

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/mac_label/gradenames

This file associates a human readable ASCII text name with the grade value. The grade value is a hierarchical value that indicates how trustworthy the label is. Typically, the grade has names such as Dubious, Suspect, Normal, Confident, Verified, TheTruth, and so on.

A gradenames file might look like this:

lowestgrade:0 
“lowest grade”:0 
good:0 
choice:10 
prime:80 
best:255 
highestgrade:255 
“highest grade”:255

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/mac_label/labelnames

This file defines all the possible security labels in an ASCII text format. It associates an ASCII text name with a security label. This file defines the name of the security label, and the MSEN type, sensitivity level, MINT type, grade, categories and divisions. Interpretation of this file relies on the msentypenames, levelnames, minttypenames, gradenames, categorynames, and divisionnames data files to define components that are specified by name rather than by number.

A labelnames file might look like this:

label1:”msenequal/mintlow”
label2:”msenlow/mintlow” 
label3:”tcsec,public/mint=biba,grade=good”

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/mac_label/lbldb_bin

This is the system binary label database. All system labels are listed here in binary form.

Binary file.

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/mac_label/levelnames

This file associates a human readable ASCII text name with the sensitivity level value. The sensitivity level is a hierarchical value that indicates how “sensitive” the label is. Typically, the sensitivity level has names such as Sensitive, Classified, Secret, Top Secret, and so on.

A typical levelnames file looks something like this:

# This is a comment line.
public:0
proprietary:30 
“company sensitive”:40 
“company confidential”:50
“executive committee only”:60

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/mac_label/minttypenames

This file maps the MINT (Mandatory INTegrity) type of a security label from an ASCII name to the numeric value.

The default minttypenames file on your system looks like this:

MintEqual:0x65 
MintHigh:0x68 
MintLow:0x6c 
Biba:0x62

dblow

-rw-r--r-- (644) dbadmin,sys

/etc/mac_label/msentypenames

This file maps the MSEN type of a security label from an ASCII name to the numeric value.

The default msentypenames file on your system is:

Admin:0x41 
MsenEqual:0x45 
MsenHigh:0x48 
MldHigh:0x49 
MsenLow:0x4c 
Mld:0x4d 
MldLow:0x4e 
tcsec:0x54 
Tcsec:0x54 

dblow

-rw-r--r-- (644) dbadmin,sys

/usr/adm/lastlog/username

These files record information for use by the login program about your last login.

A typical lastlog file might look like:

^A(:4ujohnsmith.other.place.com

dbadmin

-rwxr-xr-x (755) root,sys

/usr/adm/oSYSLOG

This file is a saved old version of the system log.

A typical oSYSLOG has records of the form:

Sep 2 01:01:38 mymachine syslogd: restart 
Sep 3 15:26:12 mymachine sendmail[15324]: AA15324: 
from=, size=1027, class=0 
Sep 3 17:14:02 mymachine sendmail[15424]: AA15424: 
from=, size=1080, class=0 
Sep 3 17:44:03 mymachine sendmail[15461]: AA15461: 
from=, size=974, class=0 

dbadmin

-rw-r--r-- (644) root,sys

/usr/adm/SYSLOG

This file contains a log of all events corresponding to those selected in the /etc/syslog.conf file.

A typical SYSLOG file looks like:

Sep 2 01:01:39 mymachine syslogd: restart 
Sep 3 09:58:35 mymachine sendmail[21326]: AA21326: 
from=, size=2266, class=0 
Sep 3 10:02:32 mymachine sendmail[21336]: AA21336: 
from=, size=1605, class=0 
Sep 3 10:07:15 mymachine sendmail[21342]: AA21342: 
from=, size=2202, class=0 

dbadmin

-rw-r--r-- (644) root,sys

/usr/lib/X11/xdm/Xresources

This file contains default information about your X environment.

The default Xresources file looks like this:

xlogin*login.translations: #override 
<key> F1: set-session-argument(failsafe) finish-field() 
<key> Return: set-session-argument() finish-field() 
xlogin*borderWidth: 3 
#ifdef COLOR 
xlogin*greetColor: #f63 
xlogin*failColor: red 
xlogin*Foreground: black 
xlogin*Background: #fdc 
#else 
xlogin*Foreground: black 
xlogin*Background: white 
#endif

dblow

-r--r--r-- (0444) root,sys

/usr/lib/X11/xdm/Xservers

This file contains the list of displays to be managed.

Most systems have only one display, numbered 0, so the file looks like this:

:0 Local local /usr/bin/X11/Xsgi :0

dblow

-r--r--r-- (0444) root,sys

/usr/spool/lp/pstatus

Printer status information is stored in this file.

Data file.

dbadmin

-rw-r--r-- (644) lp,sys

/usr/spool/lp/qstatus

Print queue status information is stored in this file.

Data file.

dbadmin

-rw-r--r-- (644) lp,sys