Chapter 8. System Data Files

IRIX relies on a number of administrative data files to provide crucial information for the system. It is the job of the System Administrator to keep these files correct and up to date. This chapter contains a list of the new system data files added as part of the Commercial Security Pak and their formats and functions.

The outline format used in this chapter for describing each administrative data file is as follows:

Pathname: 

The complete pathname of the file.

Description: 

A complete description of the purpose of the file.

Syntax: 

The syntax of a record or entry in the file.

DAC Permission: 


The default Discretionary Access Control (DAC) file permissions associated with the file.

Home Directory Files

The following file is present in the home directory of each user.

~/.rhosts

Pathname: 

~/.rhosts

Description: 

This file contains a list of hosts from which this user is allowed to initiate a remote session without additional authentication.

Syntax: 

command hostname username

DAC Permission: 


-rw-r--r-- (644) root,sys

/var Directory Structure Files

/var/adm/OLDsulog

Pathname: 

/var/adm/OLDsulog

Description: 

This file is used for backups of the sulog file.

Syntax: 

Each entry in OLDsulog has the following form:

SU 09/09 10:21 + ttyq2 invoking user-new identity 

DAC Permission: 


-rw------- (600) admin,admin

/var/adm/sulog

Pathname: 

/var/adm/sulog

Description: 

This file contains a log of all uses of the su(1) command.

Syntax: 

Each entry in sulog has the following form:

SU 09/09 10:21 + ttyq2 invoking user-new identity 

DAC Permission: 


-rw------- (600) admin,admin

/dev directory Structure Files

The following files reside in the special /dev directory structure. These device files control the physical hardware.

/dev/console

Pathname: 

/dev/console

Description: 

The console provides the operator interface to the system. The operating system and system utility programs display error messages on the system console.

The console is a logical terminal represented by a text window on the graphics monitor.

The evaluated configuration does not support the option of using a serial terminal.

The device special file /dev/console represents the system console. /dev/console is the slave side of pseudo-tty (see pty(7)).

Syntax: 

Special Device File

DAC Permission: 


crw--w--w- (622) root,sys

dev/klog

Pathname: 

/dev/klog

Description: 

The /dev/klog file is the kernel error logging interface. When this device is open, messages printed by the kernel, which normally appear only in the system console window, also are buffered by the klog driver. The messages obtained by reading from this driver are the text of the kernel error messages.

Normally, this device is opened and read by syslogd(1M), the system logging daemon.

Syntax: 

Special device file.

DAC Permission: 


crw-r--r-- (644) root,sys

/dev/kmem

Pathname: 

/dev/kmem

Description: 

/dev/kmem is a special file that is an image of the kernel virtual memory of the computer. It may be used, for example, to examine, and even to patch the system memory.

DAC Permission: 


crw-r----- (640) root,sys

/dev/log

Pathname: 

/dev/log

Description: 

This file is a named pipe that is read by syslogd(1m) as a source of system log messages. If a program writes error messages to /dev/log, syslogd receives the messages and places them in the system log.

Syntax 

Named pipe.

DAC Permission: 


prw-rw-rw- (666) root,sys

/dev/ptc

Pathname: 

/dev/ptc

Description: 

This file is the master pseudo-terminal.

DAC Permission: 


crw-rw-rw- (666) root,sys

/dev/tty

Pathname: 

/dev/tty

Description: 

This file is, in each process, a synonym for the control terminal associated with the process group of that process, if any.

DAC Permission: 


crw-rw-rw- (666) root,sys

/etc Directory Files

/etc/TIMEZONE

Pathname: 

/etc/TIMEZONE

Description: 

This file contains the time zone (for example, EST), the hours of difference between the time zone and Greenwich time zone (for example, 5), and the alternative time zone (for example, EDT). All the information is in one line without any field separators.

Syntax: 

TZ=<timezone><hours_from_GMT><daylight_timezone>

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/capability

Pathname: 

/etc/capability

Description: 

This file specifies the system-file editing permissions for each account on your system. This file contains the following information for each account:

name

User's login name – contains no uppercase characters and must not be longer than eight characters.

capabilities

The various capabilities that the user is allowed.


Syntax: 

The following is a sample capability file:

root:all+eip:all+eip
sysadm:all=:all=
auditor:CAP_AUDIT_WRITE,CAP_AUDIT_CONTROL,CAP_KILL+eip
dbadmin:all=:all=
ernie:all=:CAP_FOWNER,CAP_SETFCAP+eip
casey:all=:all+eip

DAC Permission: 


-rw-r--r-- (644) dbadmin,sys

/etc/cshrc

Pathname: 

/etc/cshrc

Description: 

This file is the prototype .cshrc.

Syntax: 

This file contains a sample of C-shell initialization commands. It is used as the default set of commands.

DAC Permission:  


-rwxr-xr-x (755) root,sys

/etc/gettydefs

Pathname: 

/etc/gettydefs

Description: 

This file contains information used by getty(1M) to set up the speed and terminal settings for a serial line. This file supplies information on what the login(1) prompt should look like. It also supplies the speed to try next if the user indicates the current speed is not correct by typing a break character.

Syntax: 

label# initial-flags # final-flags # login-prompt #next-label

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/group

Pathname: 

/etc/group

Description: 

This file is the definition file for user groups on the system.

Syntax: 

groupname:epasswd:GID:[user1,user2]

DAC Permission: 


-rw-r--r-- (644) dbadmin,sys

Dependencies: 

/etc/passwd

/etc/hosts

Pathname: 

/etc/hosts

Description: 

This file contains information regarding the known hosts on the network.

Syntax: 

IP-address hostname alias[es]

DAC Permission: 


-rw-r--r-- (644) dbadmin,sys

/etc/hosts.equiv

Pathname: 

/etc/hosts.equiv

Description: 

This file contains a list of trusted hosts. When an rlogin(1C), rcp(1C), or rsh(1C) request from a listed host is made, and the initiator of the request is also listed in the /etc/passwd file, no further validity checking is done as long as the login name and user ID number of the user on the remote host are identical to the listing in the local /etc/passwd file. If these conditions are met, rlogin does not prompt for a password, and rcp and rsh complete successfully. So a remote user is “equivalenced” to a local user with the same user name and user ID number when the remote user's hostname is found in hosts.equiv.

Syntax: 

hostname

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/ioctl.syscon

Pathname: 

/etc/ioctl.syscon

Description: 

This file defines the state of the console device. When init comes up at boot time, and whenever it switches out of single-user state to normal run states, it sets the ioctl(2) states of the virtual console, /dev/console, to those modes saved in the file /etc/ioctl.syscon. This file is written by init whenever the single-user state is entered.

Syntax: 

d26:1805:8bf:3b:0:3:1c:8:18:4:0:0:0:0:0:0

DAC Permission: 


-rw-r--r-- (644) root,sys

Referenced by: 

init

Modified by: 

init

/etc/inittab

Pathname: 

/etc/inittab

Description: 

This file supplies the script to init's role as a general process dispatcher. The majority of init's process dispatching activity involves creating instances of the terminal line process, /etc/getty. Other processes typically dispatched by init are daemons and shells.

Syntax: 

id:rstate:action:process

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/motd

Pathname: 

/etc/motd

Description: 

This file is used for the “Message of the Day.” The System Administrator can freely edit this file. The /etc/motd file is displayed each time a user logs in.

Syntax: 

ASCII text file.

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/nologin

Pathname: 

/etc/nologin

Description: 

If the file is present, remote user logins via the network are not permitted.

Syntax: 

There is no syntax to this file. The existence of the file is all that is required.

DAC Permission: 


-r--r--r-- (0444) root,sys

Dependencies: 

login

Referenced by: 

login

/etc/opasswd

Pathname: 

/etc/opasswd

Description: 

This file is a backup copy of /etc/passwd.

Syntax: 

username:e_passwd[,Mmww|lock_char]:UID:GID:GECOS: $HOME:$SHELL

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/passwd

Pathname: 

/etc/passwd

Description: 

This file contains information about the user. Unlike standard IRIX, the encrypted password is not stored in this file. The encrypted password is kept in /etc/shadow. The passwd file contains the following information for each user:

name

User's login name contains no uppercase characters and must not be greater than eight characters long.

unused

The field that is normally occupied by the password is unused.

numerical user ID

This is the user's ID in the system and it must be unique.

numerical group ID

This is the number of the primary group to which the user belongs.

user's real name

In some versions of UNIX, this field also contains the user's office location, extension, home phone, and so on.

initial working directory

The directory that the user is in at login. This is known as the “home” directory.

shell

The program to use as the command interpreter (“shell”) when the user logs in. If the shell field is empty, the Bourne shell (/bin/sh) is assumed.


Syntax: 

username::UID:GID:GECOS: $HOME:$SHELL

DAC Permission: 


-rw-r--r-- (644) dbadmin,sys

/etc/profile

Pathname: 

/etc/profile

Description: 

This file is the prototype shell environment command file for use with /bin/sh. Commands in this file are executed when the shell starts up.

Syntax: 

ASCII text file.

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/rhost.conf

Pathname: 

/etc/rhost.conf

Description: 

This file is the configuration file for the remote login and remote shell programs. It specifies the parameters under which remote logins and shells are allowed on your system from systems that share your security policy and those that do not. Default capability sets and allowed login labels are specified here.

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/services

Pathname: 

/etc/services

Description: 

The /etc/services file contains information regarding the known services available in the Internet.

Syntax: 

Example syntax:

smtp 25/tcp mail

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/shadow

Pathname: 

/etc/shadow

Description: 

This is the user password file. This file contains the following information for each user:

name

User's login name—contains no uppercase characters and must not be longer than eight characters.

password

Encrypted password and optional password aging information.


Syntax: 

The following is a sample shadow file:

root:kEXFeXFTPoxE
bill:6k/7KCFRPNVXg,z/

DAC Permission: 


-rw-r--r-- (644) dbadmin,sys

/etc/syslog.conf

Pathname: 

/etc/syslog.conf

Description: 

This file directs the system log daemon (syslogd) to log messages in a given set of files. Each log message in a logfile is one line. For more information about this file, see the syslogd(1m) reference page.

Syntax: 

An example syslog.conf file:

kern.debug |/usr/adm/klogpp /usr/adm/SYSLOG
kern.debug |/usr/adm/klogpp /dev/console 
daemon,auth,syslog,lpr.debug /usr/adm/SYSLOG 
kern.err @ginger 
*.emerg * 
*.alert eric,beth 
*.alert;auth.warning ralph

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/ttytype

Pathname: 

/etc/ttytype

Description: 

This file contains a list of the tty ports on the system, and for each port, the kind of terminal that is attached to it.

Syntax: 

Example:

iris-ansi console 
iris-ansi systty 
vt100 ttyd1 
?h19 ttyd2 
?h19 ttyd3 
?v50am ttyd4 
?v50am ttyd5 
?v50am ttyd6 
?v50am ttyd7 
?v50am ttyd8 
?v50am ttyd9 
?v50am ttyd10 
?v50am ttyd11 
?v50am ttyd12

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/utmp

Pathname: 

/etc/utmp

Description: 

This file holds user information for such commands as who(1), write(1), and login(1). For more information about this file, see the reference page utmp(4).

Syntax: 

Example:

struct utmp { 
char ut_user[8]; /*User login name*/ 
char ut_id[4]; /*/etc/inittab id usually line #)*/
char ut_line[12]; /* device name (console,lnxx)*/
short ut_pid; /*process id*/ 
short ut_type; /* type of entry */ 
struct exit_status { 
~~~~short ~~~~e_termination;/*termination status*/ 
~~~~short ~~~~e_exit; /* Process exit status */ 
}ut_exit; /*exit status of a process marked */ 
/* as a DEAD_PROCESS.*/ 
time_t ut_time; /* time entry was made */ 
};

DAC Permission: 


-rw-rw-r-- (664) adm,adm

/etc/wtmp

Pathname: 

/etc/wtmp

Description: 

This file contains one record per username with related information: inittab ID; device name connected to; process ID; type of entry (for example, a login process); exit status, and time the entry was made. For more information about this file, see the reference page utmp(4).

Syntax: 

Example:

struct utmp { 
char ut_user[8]; /* User login name */ 
char ut_id[4]; /*/etc/inittab id usually line #*/
char ut_line[12]; /* device name (console,lnxx) */ 
short ut_pid; /* process id */ 
short ut_type; /* type of entry */ 
struct exit_status { 
~~~~short ~~~~e_termination;/*termination status*/
~~~~short ~~~~e_exit; /* Process exit status */ 
} ut_exit; /* The exit status of a process marked as DEAD_PROCESS. */ 
time_t ut_time; /* time entry was made */ 
};

DAC Permission: 


-rw-rw-r-- (664) adm,adm

/etc/config Directory Files

All files in the config directory that lack suffixes contain only the words “on” or “off.” This indicates whether or not the named subsystem is activated at system startup time. Files with the suffix .options contain flags to the subsystem startup command.

/etc/config/acct

Pathname: 

/etc/config/acct

Description: 

This file contains either the word “on” or “off.” If it contains “on,” process accounting is turned on by default. If it contains the word “off,” process accounting is not run by default.

Syntax: 

The word “on” or “off.”

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/automount

Pathname: 

/etc/config/automount

Description: 

This file is used by the system to direct NFS to automatically mount or not mount network filesystems.

Syntax: 

The word “on” or “off.”

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/login.options

Pathname: 

/etc/config/login.options

Description: 

This file controls the default actions of the login program, such as the number of unsuccessful attempts to log in or the timeout period while waiting for a password. This file is described in the login(4) reference page.

Syntax: 

Example:

maxtries=5
disabletime=30
passwdreq

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/named

Pathname: 

/etc/config/named

Description: 

This file directs the system to spawn or not to spawn the named(1m) domain name server.

Syntax: 

The word “on” or “off.”

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/network

Pathname: 

/etc/config/network

Description: 

This file is used by the system to direct NFS to spawn the lock and status daemons or not to spawn them.

Syntax: 

The word “on” or “off.”

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/nfs

Pathname: 

/etc/config/nfs

Description: 

This file is used by the system to start the NFS daemons and mount the network filesystems.

Syntax: 

The word “on” or “off.”

DAC Permission: 


-rw-r--r-- (644) root,sys

Referenced by: 

init

/etc/config/rwhod

Pathname: 

/etc/config/rwhod

Description: 

This file directs the system to spawn or not to spawn the rwhod(1m) server daemon.

Syntax: 

The word “on” or “off.”

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/satd.options

Pathname: 

/etc/config/satd.options

Description: 

This file contains saved satd options. A flag to satd fills this file with the current satd options.

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/sat_select.options

Pathname: 

/etc/config/sat_select.options

Description: 

This file contains saved options to sat_select. A flag to sat_select fills this file with the current sat_select options.

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/syslogd.options

Pathname: 

/etc/config/syslogd.options

Description: 

This file contains command line options for the syslogd(1m) program. syslogd reads and logs messages into a set of files.

Syntax: 

Optional site-specific flags belong in the options file. The available flags are these:

-f Specify an alternate configuration file.

-m Select the number of minutes between mark messages.

-d Turn on debugging.

-p Use the given name for the named pipe instead of /dev/log.

DAC Permission: 


-rw-r--r-- (644) root,sys

/etc/config/timed

Pathname: 

/etc/config/timed

Description: 

This file directs the system to spawn or not to spawn the timed(1m) clock controlling daemon.

Syntax: 

The word “on” or “off.”

DAC Permission: 


-rw-r--r-- (644) root,sys

/usr Directory Structure Files

/usr/adm/lastlog/username

Pathname: 

/usr/adm/lastlog/username

Description: 

These files record information for use by the login program about your last login.

Syntax: 

A typical lastlog file might look like this:

^A(:4ujohnsmith.other.place.com

DAC Permission: 


-rwxr-xr-x (755) root,sys

/usr/adm/oSYSLOG

Pathname: 

/usr/adm/oSYSLOG

Description: 

This file is a saved old version of the system log.

Syntax: 

A typical oSYSLOG has records of this form:

Sep 2 01:01:38 mymachine syslogd: restart 
Sep 3 15:26:12 mymachine sendmail[15324]: AA15324: 
from=, size=1027, class=0 
Sep 3 17:14:02 mymachine sendmail[15424]: AA15424: 
from=, size=1080, class=0 
Sep 3 17:44:03 mymachine sendmail[15461]: AA15461: 
from=, size=974, class=0 

DAC Permission: 


-rw-r--r-- (644) root,sys

/usr/adm/SYSLOG

Pathname: 

/usr/adm/SYSLOG

Description: 

This file contains a log of all events corresponding to those selected in the /etc/syslog.conf file.

Syntax: 

A typical SYSLOG file looks like this:

Sep 2 01:01:39 mymachine syslogd: restart 
Sep 3 09:58:35 mymachine sendmail[21326]: AA21326: 
from=, size=2266, class=0 
Sep 3 10:02:32 mymachine sendmail[21336]: AA21336: 
from=, size=1605, class=0 
Sep 3 10:07:15 mymachine sendmail[21342]: AA21342: 
from=, size=2202, class=0 

DAC Permission: 


-rw-r--r-- (644) root,sys

/usr/lib/X11/xdm/Xresources

Pathname: 

/usr/lib/X11/xdm/Xresources

Description: 

This file contains default information about your X environment.

Syntax: 

The default Xresources file looks like this:

xlogin*login.translations: #override 
<key> F1: set-session-argument(failsafe) finish-field() 
<key> Return: set-session-argument() finish-field() 
xlogin*borderWidth: 3 
#ifdef COLOR 
xlogin*greetColor: #f63 
xlogin*failColor: red 
xlogin*Foreground: black 
xlogin*Background: #fdc 
#else 
xlogin*Foreground: black 
xlogin*Background: white 
#endif

DAC Permission: 


-r--r--r-- (0444) root,sys

/usr/lib/X11/xdm/Xservers

Pathname: 

/usr/lib/X11/xdm/Xservers

Description: 

This file contains the list of displays to be managed.

Syntax: 

Most systems have only one display, numbered 0, so the file looks like this:

:0 Local local /usr/bin/X11/Xsgi :0

DAC Permission: 


-r--r--r-- (0444) root,sys

/usr/spool/lp/pstatus

Pathname: 

/usr/spool/lp/pstatus

Description: 

Printer status information is stored in this file.

Syntax: 

Data file.

DAC Permission: 


-rw-r--r-- (644) lp,sys

/usr/spool/lp/qstatus

Pathname: 

/usr/spool/lp/qstatus

Description: 

Print queue status information is stored in this file.

Syntax: 

Data file.

DAC Permission: 


-rw-r--r-- (644) lp,sys