¦=====================================================¦
¦ This file contains some example output from YASSP ¦
¦ Last Update 12.May.00 ¦
¦=====================================================¦
o Running clean-up_5.6.tar.Z
-----------------------------
A minimum patch level is needed, for example if you see the following:
/var/sadm/clean-up_5.6/install.sh
Please install a recent version of kernel patch 105181 (Version 07 at least)
Your version is obsolete: 05
Exiting installation
Download the recommended patch bundle, install and reboot, then try yassp again.
o Running secclean on Solaris 2.6
---------------------------------
Note: we had already created an /etc/notrouter file, hence a minor wardning below.
% pkgadd -d secclean
The following packages are available:
1 SECclean Solaris (2.6 or 2.7) Security Cleanup
(sparc,i386) 5.0-Beta#5, $Id: pkginfo,v 4.9 2000/05/10 00:07:48 chouanar Exp $
Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]: 1
Processing package instance <SECclean> from </opt/install/yassp/secclean>
Solaris (2.6 or 2.7) Security Cleanup
(sparc,i386) 5.0-Beta#5, $Id: pkginfo,v 4.9 2000/05/10 00:07:48 chouanar Exp $
Xerox Corporation, PARC
Using </> as the package base directory.
## Processing package information.
## Processing system information.
22 package pathnames are already properly installed.
## Verifying package dependencies.
## Verifying disk space requirements.
## Checking for conflicts with packages already installed.
The following files are already installed on the system and are being
used by another package:
* /etc/notrouter <attribute change only>
* - conflict with a file which does not belong to any package.
Do you want to install these conflicting files [y,n,?,q] y
## Checking for setuid/setgid programs.
Installing Solaris (2.6 or 2.7) Security Cleanup as <SECclean>
## Installing part 1 of 1.
/.rhosts
/etc/SECclean_motd
/etc/SECclean_profile
/etc/cron.d/at.allow
/etc/cron.d/cron.allow
/etc/default/SECclean_inetinit
/etc/default/SECclean_login
/etc/default/SECclean_password
/etc/default/SECclean_su
/etc/default/SECclean_sys-suspend
/etc/default/ftpd
/etc/default/telnetd
/etc/dt/config/SECclean_Xaccess
/etc/ftp-banner
/etc/ftpusers
/etc/hosts.equiv
/etc/init.d/inetinit_5.6
/etc/init.d/inetinit_5.7
/etc/init.d/inetinit_5.8
/etc/init.d/inetsvc_5.6
/etc/init.d/inetsvc_5.7
/etc/init.d/inetsvc_5.8
/etc/init.d/nettune
/etc/init.d/network_5.8
/etc/init.d/umask.sh
/etc/issue
/etc/notrouter <attribute change only>
/etc/rc.conf
/etc/shells
/etc/skel/SECclean_local.cshrc
/etc/skel/SECclean_local.profile
/etc/yassp.conf
/opt/local/sbin/clean_passwd
/opt/local/sbin/cleanlib.sh
/opt/local/sbin/passwd.nawk
/usr/bin/openwin
/usr/dt/config/SECclean_Xaccess
/var/adm/loginlog
/var/spool/cron/crontabs/SECclean_root
[ verifying class <none> ]
/etc/rc0.d/S00umask.sh <linked pathname>
/etc/rc1.d/S00umask.sh <linked pathname>
/etc/rc2.d/S00umask.sh <linked pathname>
/etc/rc3.d/S00umask.sh <linked pathname>
/etc/rcS.d/S00umask.sh <linked pathname>
/etc/rcS.d/S31nettune <linked pathname>
Modifying /etc/inet/inetd.conf
Modifying /etc/inet/services
Modifying /etc/init.d/rpc
Modifying /etc/pam.conf
Modifying /etc/rmmount.conf
Modifying /etc/system
[ verifying class <sed> ]
## Executing postinstall script.
The postinstall script is silently running. It may take a while
on slow machine. Just be patient
Disabling Startup files: inetsvc inetinit
Modifying Startup files to use /etc/rc.conf: xntpd nfs.client autofs nscd nfs.server volmgt sendmail dtlogin cacheos cachefs.root asppp uucp cachefs.daemon spc autoinstall lp PRESERVE cacheos.finish sysid.sys sysid.net snmpdx dmi power init.dmi init.snmpdx utmpd devfsadm devlinks apache dhcp dhcpagent ldap.client llc2 ncakmod ncalogd slpd webstart
Creating your default /etc/rc.conf
Saving files: /etc/auto_home /etc/auto_master /etc/dfs/dfstab /var/spool/cron/crontabs/adm /var/spool/cron/crontabs/sys /var/spool/cron/crontabs/lp /var/spool/cron/crontabs/uucp
--- Save_and_move_file: One file is not owned by any PKG
--- /var/spool/cron/crontabs/uucp
/etc/profile /etc/default/login /etc/default/su /etc/default/inetinit /var/spool/cron/crontabs/root /etc/motd /etc/default/password /etc/default/sys-suspend /etc/skel/local.cshrc /etc/skel/local.profile /usr/dt/config/Xaccess /etc/dt/config/Xaccess /etc/init.d/inetsvc /etc/init.d/inetinit
Closing the package we touched: SUNWdtdte SUNWpmowr SUNWaccr SUNWdhcsr SUNWsacom SUNWpmr SUNWpsr SUNWadmr SUNWpcr SUNWbnur SUNWapppr SUNWdtlog SUNWvolr SUNWatfsr SUNWntpr SUNWcsr SUNWcsr
Updating SECclean package DB: /etc/profile /etc/default/login /etc/default/su /etc/default/inetinit /var/spool/cron/crontabs/root /etc/motd /etc/default/password /etc/default/sys-suspend /etc/skel/local.cshrc /etc/skel/local.profile /usr/dt/config/Xaccess /etc/dt/config/Xaccess /etc/init.d/inetsvc_5.6 /etc/init.d/inetsvc_5.7 /etc/init.d/inetinit_5.6 /etc/init.d/inetinit_5.7
Closing SECclean DB
Replacing: /etc/profile /etc/default/login /etc/default/su /etc/default/inetinit /var/spool/cron/crontabs/root /etc/motd /etc/default/password /etc/default/sys-suspend /etc/skel/local.cshrc /etc/skel/local.profile /usr/dt/config/Xaccess /etc/dt/config/Xaccess
Choosing the right startup files: /etc/init.d/inetsvc /etc/init.d/inetinit for your OS: Solaris 5.6
Replacing Special startup files: /etc/init.d/inetsvc /etc/init.d/inetinit and creating the symlink
Closing again SECclean DB
--- The following files has been backup under /var/sadm/pkg/SECclean/save
--- /etc/init.d/inetinit
--- /etc/init.d/inetsvc
--- /usr/dt/config/Xaccess
--- /etc/skel/local.profile
--- /etc/skel/local.cshrc
--- /etc/default/sys-suspend
--- /etc/motd
--- /var/spool/cron/crontabs/root
--- /etc/default/inetinit
--- /etc/default/su
--- /etc/default/login
--- /etc/profile
--- /var/spool/cron/crontabs/uucp
--- /var/spool/cron/crontabs/lp
--- /var/spool/cron/crontabs/sys
--- /var/spool/cron/crontabs/adm
--- /etc/dfs/dfstab
--- /etc/auto_master
--- /etc/auto_home
Cleaning the passwd file...
Disabling system account:
daemon
bin
sys
adm
lp
smtp
uucp
nuucp
listen
nobody
noaccess
nobody4
password file saved under /etc/passw.Old
*** You need to reboot your workstation NOW ***
Installation of <SECclean> was successful.