TABLE OF CONTENTS
ii SYSTEM GUIDE
Security Setup 4-4
DocuSP 3.7 security changes 4-4
Using the High security setting 4-5
User and File-level changes 4-7
User level 4-7
Solaris file permissions secured 4-8
Network and name service changes 4-8
Disabling secure name service databases 4-8
Multicast routing disabled 4-8
OS and host information hidden 4-8
Sendmail daemon secured 4-8
Network parameters secured 4-9
Executable stacks disabled 4-9
NFS port monitor restricted 4-9
Remote CDE login disabled 4-9
DocuSP router capabilities disabled 4-9
Security warning banners 4-9
XDSS script components 4-10
The configure-xdss script 4-10
Disabling LP Anonymous Printing 4-10
DigiPath and Decomposition Services 4-10
Remote shell internet service 4-11
disable-security and enable-security scripts 4-11
enable-ftp and disable-ftp scripts 4-11
enable-remote-diagnostics/disable-remote-diagnostics scripts 4-11
User Account Management 4-11
Print command line client from remote systems 4-12
Other security tips 4-13
Configure for xrxusr 4-13
Document and backup 4-14
Online help for security 4-14
Sample of inetd.conf file 4-14