IRIX relies on a number of administrative data files to provide crucial information for the system. It is the job of the System Administrator to keep these files correct and up to date. This chapter contains a list of the new system data files added as part of the Commercial Security Pak and their formats and functions.
The outline format used in this chapter for describing each administrative data file is as follows:
Pathname: | The complete pathname of the file. | |
Description: | A complete description of the purpose of the file. | |
Syntax: | The syntax of a record or entry in the file. | |
DAC Permission: |
|
The following file is present in the home directory of each user.
Pathname: | /var/adm/OLDsulog | ||
Description: | This file is used for backups of the sulog file. | ||
Syntax: | Each entry in OLDsulog has the following form:
| ||
DAC Permission: | |
The following files reside in the special /dev directory structure. These device files control the physical hardware.
Pathname: | /dev/console | |
Description: | The console provides the operator interface to the system. The operating system and system utility programs display error messages on the system console. The console is a logical terminal represented by a text window on the graphics monitor. The evaluated configuration does not support the option of using a serial terminal. The device special file /dev/console represents the system console. /dev/console is the slave side of pseudo-tty (see pty(7)). | |
Syntax: | Special Device File | |
DAC Permission: | |
Pathname: | /dev/klog | |
Description: | The /dev/klog file is the kernel error logging interface. When this device is open, messages printed by the kernel, which normally appear only in the system console window, also are buffered by the klog driver. The messages obtained by reading from this driver are the text of the kernel error messages. Normally, this device is opened and read by syslogd(1M), the system logging daemon. | |
Syntax: | Special device file. | |
DAC Permission: | |
Pathname: | /dev/kmem | |
Description: | /dev/kmem is a special file that is an image of the kernel virtual memory of the computer. It may be used, for example, to examine, and even to patch the system memory. | |
DAC Permission: | |
Pathname: | /dev/log | |
Description: | This file is a named pipe that is read by syslogd(1m) as a source of system log messages. If a program writes error messages to /dev/log, syslogd receives the messages and places them in the system log. | |
Syntax | Named pipe. | |
DAC Permission: | |
Pathname: | /dev/ptc | |
Description: | This file is the master pseudo-terminal. | |
DAC Permission: | |
Pathname: | /etc/TIMEZONE | |
Description: | This file contains the time zone (for example, EST), the hours of difference between the time zone and Greenwich time zone (for example, 5), and the alternative time zone (for example, EDT). All the information is in one line without any field separators. | |
Syntax: | TZ=<timezone><hours_from_GMT><daylight_timezone> | |
DAC Permission: | |
Pathname: | /etc/capability | |||||
Description: | This file specifies the system-file editing permissions for each account on your system. This file contains the following information for each account:
| |||||
Syntax: | The following is a sample capability file:
| |||||
DAC Permission: | |
Pathname: | /etc/cshrc | |
Description: | This file is the prototype .cshrc. | |
Syntax: | This file contains a sample of C-shell initialization commands. It is used as the default set of commands. | |
DAC Permission: | |
Pathname: | /etc/gettydefs | |
Description: | This file contains information used by getty(1M) to set up the speed and terminal settings for a serial line. This file supplies information on what the login(1) prompt should look like. It also supplies the speed to try next if the user indicates the current speed is not correct by typing a break character. | |
Syntax: | label# initial-flags # final-flags # login-prompt #next-label | |
DAC Permission: | |
Pathname: | /etc/group | |
Description: | This file is the definition file for user groups on the system. | |
Syntax: | groupname:epasswd:GID:[user1,user2] | |
DAC Permission: | | |
Dependencies: | /etc/passwd |
Pathname: | /etc/hosts | |
Description: | This file contains information regarding the known hosts on the network. | |
Syntax: | IP-address hostname alias[es] | |
DAC Permission: | |
Pathname: | /etc/hosts.equiv | |
Description: | This file contains a list of trusted hosts. When an rlogin(1C), rcp(1C), or rsh(1C) request from a listed host is made, and the initiator of the request is also listed in the /etc/passwd file, no further validity checking is done as long as the login name and user ID number of the user on the remote host are identical to the listing in the local /etc/passwd file. If these conditions are met, rlogin does not prompt for a password, and rcp and rsh complete successfully. So a remote user is “equivalenced” to a local user with the same user name and user ID number when the remote user's hostname is found in hosts.equiv. | |
Syntax: | hostname | |
DAC Permission: | |
Pathname: | /etc/ioctl.syscon | |
Description: | This file defines the state of the console device. When init comes up at boot time, and whenever it switches out of single-user state to normal run states, it sets the ioctl(2) states of the virtual console, /dev/console, to those modes saved in the file /etc/ioctl.syscon. This file is written by init whenever the single-user state is entered. | |
Syntax: | d26:1805:8bf:3b:0:3:1c:8:18:4:0:0:0:0:0:0 | |
DAC Permission: | | |
Referenced by: | init | |
Modified by: | init |
Pathname: | /etc/inittab | |
Description: | This file supplies the script to init's role as a general process dispatcher. The majority of init's process dispatching activity involves creating instances of the terminal line process, /etc/getty. Other processes typically dispatched by init are daemons and shells. | |
Syntax: | id:rstate:action:process | |
DAC Permission: | |
Pathname: | /etc/motd | |
Description: | This file is used for the “Message of the Day.” The System Administrator can freely edit this file. The /etc/motd file is displayed each time a user logs in. | |
Syntax: | ASCII text file. | |
DAC Permission: | |
Pathname: | /etc/nologin | |
Description: | If the file is present, remote user logins via the network are not permitted. | |
Syntax: | There is no syntax to this file. The existence of the file is all that is required. | |
DAC Permission: | | |
Dependencies: | login | |
Referenced by: | login |
Pathname: | /etc/opasswd | |
Description: | This file is a backup copy of /etc/passwd. | |
Syntax: | username:e_passwd[,Mmww|lock_char]:UID:GID:GECOS: $HOME:$SHELL | |
DAC Permission: | |
Pathname: | /etc/passwd | |||||||||||||||
Description: | This file contains information about the user. Unlike standard IRIX, the encrypted password is not stored in this file. The encrypted password is kept in /etc/shadow. The passwd file contains the following information for each user:
| |||||||||||||||
Syntax: | username::UID:GID:GECOS: $HOME:$SHELL | |||||||||||||||
DAC Permission: | |
Pathname: | /etc/profile | |
Description: | This file is the prototype shell environment command file for use with /bin/sh. Commands in this file are executed when the shell starts up. | |
Syntax: | ASCII text file. | |
DAC Permission: | |
Pathname: | /etc/rhost.conf | |
Description: | This file is the configuration file for the remote login and remote shell programs. It specifies the parameters under which remote logins and shells are allowed on your system from systems that share your security policy and those that do not. Default capability sets and allowed login labels are specified here. | |
DAC Permission: | |
Pathname: | /etc/services | ||
Description: | The /etc/services file contains information regarding the known services available in the Internet. | ||
Syntax: | Example syntax:
| ||
DAC Permission: | |
Pathname: | /etc/shadow | |||||
Description: | This is the user password file. This file contains the following information for each user:
| |||||
Syntax: | The following is a sample shadow file:
| |||||
DAC Permission: |
|
Pathname: | /etc/syslog.conf | ||
Description: | This file directs the system log daemon (syslogd) to log messages in a given set of files. Each log message in a logfile is one line. For more information about this file, see the syslogd(1m) reference page. | ||
Syntax: | An example syslog.conf file:
| ||
DAC Permission: |
|
Pathname: | /etc/ttytype | ||
Description: | This file contains a list of the tty ports on the system, and for each port, the kind of terminal that is attached to it. | ||
Syntax: | Example:
| ||
DAC Permission: |
|
Pathname: | /etc/utmp | ||
Description: | This file holds user information for such commands as who(1), write(1), and login(1). For more information about this file, see the reference page utmp(4). | ||
Syntax: | Example:
| ||
DAC Permission: | |
Pathname: | /etc/wtmp | ||
Description: | This file contains one record per username with related information: inittab ID; device name connected to; process ID; type of entry (for example, a login process); exit status, and time the entry was made. For more information about this file, see the reference page utmp(4). | ||
Syntax: | Example:
| ||
DAC Permission: | |
All files in the config directory that lack suffixes contain only the words “on” or “off.” This indicates whether or not the named subsystem is activated at system startup time. Files with the suffix .options contain flags to the subsystem startup command.
Pathname: | /etc/config/acct | |
Description: | This file contains either the word “on” or “off.” If it contains “on,” process accounting is turned on by default. If it contains the word “off,” process accounting is not run by default. | |
Syntax: | The word “on” or “off.” | |
DAC Permission: | |
Pathname: | /etc/config/automount | |
Description: | This file is used by the system to direct NFS to automatically mount or not mount network filesystems. | |
Syntax: | The word “on” or “off.” | |
DAC Permission: | |
Pathname: | /etc/config/login.options | ||
Description: | This file controls the default actions of the login program, such as the number of unsuccessful attempts to log in or the timeout period while waiting for a password. This file is described in the login(4) reference page. | ||
Syntax: | Example:
| ||
DAC Permission: | |
Pathname: | /etc/config/named | |
Description: | This file directs the system to spawn or not to spawn the named(1m) domain name server. | |
Syntax: | The word “on” or “off.” | |
DAC Permission: | |
Pathname: | /etc/config/network | |
Description: | This file is used by the system to direct NFS to spawn the lock and status daemons or not to spawn them. | |
Syntax: | The word “on” or “off.” | |
DAC Permission: | |
Pathname: | /etc/config/nfs | |
Description: | This file is used by the system to start the NFS daemons and mount the network filesystems. | |
Syntax: | The word “on” or “off.” | |
DAC Permission: | | |
Referenced by: | init |
Pathname: | /etc/config/rwhod | |
Description: | This file directs the system to spawn or not to spawn the rwhod(1m) server daemon. | |
Syntax: | The word “on” or “off.” | |
DAC Permission: | |
Pathname: | /etc/config/satd.options | |
Description: | This file contains saved satd options. A flag to satd fills this file with the current satd options. | |
DAC Permission: | |
Pathname: | /etc/config/sat_select.options | |
Description: | This file contains saved options to sat_select. A flag to sat_select fills this file with the current sat_select options. | |
DAC Permission: | |
Pathname: | /etc/config/syslogd.options | |
Description: | This file contains command line options for the syslogd(1m) program. syslogd reads and logs messages into a set of files. | |
Syntax: | Optional site-specific flags belong in the options file. The available flags are these: -f Specify an alternate configuration file. -m Select the number of minutes between mark messages. -d Turn on debugging. -p Use the given name for the named pipe instead of /dev/log. | |
DAC Permission: | |
Pathname: | /usr/adm/lastlog/username | ||
Description: | These files record information for use by the login program about your last login. | ||
Syntax: | A typical lastlog file might look like this:
| ||
DAC Permission: | |
Pathname: | /usr/adm/oSYSLOG | ||
Description: | This file is a saved old version of the system log. | ||
Syntax: | A typical oSYSLOG has records of this form:
| ||
DAC Permission: | |
Pathname: | /usr/adm/SYSLOG | ||
Description: | This file contains a log of all events corresponding to those selected in the /etc/syslog.conf file. | ||
Syntax: | A typical SYSLOG file looks like this:
| ||
DAC Permission: | |
Pathname: | /usr/lib/X11/xdm/Xresources | ||
Description: | This file contains default information about your X environment. | ||
Syntax: | The default Xresources file looks like this:
| ||
DAC Permission: | |
Pathname: | /usr/lib/X11/xdm/Xservers | ||
Description: | This file contains the list of displays to be managed. | ||
Syntax: | Most systems have only one display, numbered 0, so the file looks like this:
| ||
DAC Permission: | |
Pathname: | /usr/spool/lp/pstatus | |
Description: | Printer status information is stored in this file. | |
Syntax: | Data file. | |
DAC Permission: | |