Trusted Solaris 8 Roadmap

This purpose of this document is to help you get started understanding and installing the Trusted Solaris^TM operating environment. It provides:

• "Trusted Solaris 8 Materials"--A list of materials shipped with the product

• "Documentation Overview"--An overview of the documentation including online, hardcopy, and man pages

• "Installing the Trusted Solaris Operating Environment"--Information needed prior to installing Trusted Solaris software and documentation

• "Installing and Using the Online Documentation Viewer"--Instructions on installing AnswerBook2^TM, the online documentation viewer, and the AnswerBook collections, and viewing the AnswerBook collections

Trusted Solaris 8 Materials

The Trusted Solaris 8 package includes the following materials:

• 5 Trusted Solaris 8 Software CDs:

  • 2 SPARC^TM Architecture (C locale) CDs

  • 2 Intel Architecture (C locale) CDs

  • 1 Sun Enterprise^TM 10000 Architecture (C locale) CD

• Trusted Solaris 8 Documentation CD--Contains the Answerbook2 server software and the following collections:

  • Trusted Solaris 8 AnswerBook Collection (835-8010-10)

  • Trusted Solaris 8 Reference Manual Collection (835-8011-10)

  • Solaris 8 6/00 on Sun Hardware AnswerBook Collection

  • Solaris 8 Maintenance Update Collection

  • Solaris 8 Installation Collection

  • Solaris 8 6/00 Release Documents Collection

  • Solaris 8 6/00 Update Collection

• Solaris 8 Documentation CD--Includes the base Solaris 8 documentation and the CDE 1.3 documentation to supplement the Trusted Solaris documentation. Only the documentation localized for the C locale is available in this package. Solaris 8 documentation for other locales can be purchased separately.

  ---

  Note -

  If you are displaying the online documentation from a Trusted Solaris server, you must install the version of the AnswerBook2 server software from the Trusted Solaris 8 Documentation CD. If you are displaying the documentation from a Solaris server, then install the AnswerBook2 server software from the Solaris 8 documentation CD.

  ---

• Trusted Solaris Supplemental Software CD (E10000 only) --Contains the Trusted Solaris versions of the following two software packages used to administer the Sun Enterprise 10000 server:

  • Alternate Pathing 2.3

  • SSP 3.3

• Solaris Device Configuration Assistant Diskette (Intel Architecture only)--Necessary for loading the Trusted Solaris operating environment onto the Intel Architecture platform.

• Trusted Solaris Installation and Configuration printed guide (805-8114-10)--Describes the planning and prerequisite knowledge necessary for installing and configuring the Trusted Solaris 8 operating environment. See description in next section.

• Trusted Solaris 8 Installation and Configuration on the Sun Enterprise 10000 printed guide (805-8125)--Describes how to install and configure the Trusted Solaris 8 operating environment on the Sun Enterprise 10000.

• Trusted Solaris 8 Release Notes printed guide (805-8117-10)--Provides necessary information for the Trusted Solaris 8 operating environment. See description in next section.

• The Trusted Solaris 8 Roadmap printed guide (805-8113-10) --This document.

Documentation Overview

Since the Trusted Solaris 8 operating environment is based on the Solaris 8 operating environment, you need access to the complete Solaris 8 documentation set in addition to the Trusted Solaris 8 documentation. The Trusted Solaris documentation set focuses on the those aspects of the environment that are different from Solaris 8. The manuals are available in both printed and online versions.

Trusted Solaris 8 Documentation Set

The Trusted Solaris documentation set consists of:

• Trusted Solaris 8 Release Notes (805-8117-10) provides help for getting started with and using the Trusted Solaris 8 version of the software. It lists known problems and describes workarounds (primary audience: administrators, secondary audience: developers, end users).

• Trusted Solaris Installation and Configuration (805-8114-10) describes how to install the Trusted Solaris operating environment at networked and non-networked sites (primary audience: administrators, secondary audience: developers).

• Trusted Solaris 8 Installation and Configuration on the Sun Enterprise 10000 (805-8125-10) describes how to install the Trusted Solaris operating environment on the E10000 server (primary audience: administrators).

• Trusted Solaris User's Guide (805-8115-10) describes the basic features of the Trusted Solaris environment from the end user's point of view. Although it is aimed at end users, it explains basic concepts that are of importance to administrators and application developers as well. It provides a glossary of terms covering the entire product (primary audience: end users, administrators, secondary audience: developers).

• Trusted Solaris Administration Overview (805-8119-10) explains the concepts of administration in the Trusted Solaris operating environment and provides an overview of administrative tools and commands (primary audience: administrators, secondary audience: developers).

• Trusted Solaris Administrator's Procedures (805-8120-10) provides detailed information for performing specific administration tasks (primary audience: administrators, secondary audience: developers).

• Trusted Solaris Audit Administration (805-8121-10) describes the auditing system (primary audience: administrators, secondary audience: developers).

• Trusted Solaris Label Administration (805-8122-10) provides information on specifying label components in the label encodings file (primary audience: administrators).

• Trusted Solaris Developer's Guide (805-8116-10) describes how to develop applications for the Trusted Solaris environment (primary audience: developers, secondary audience: administrators).

• Compartmented Mode Workstation Labeling: Encodings Format (805-8123-10) describes the syntax used in the label encodings file for enforcing the various rules concerning well-formed labels for a system. This is a third-party document, written by the MITRE Corporation specifically for the U.S. government. It complements the Trusted Solaris Label Administration (primary audience: administrators, secondary audience: developers).

• Trusted Solaris 8 Transition Guide (805-8118-10) provides an overview of the differences between earlier versions of the Trusted Solaris, Solaris 8, and Trusted Solaris 8 operating environments (primary audience: administrators, end users, secondary audience: developers).

• Trusted Solaris 8 Reference Manual (805-8124-10) provides a printed version of all Trusted Solaris man pages in four volumes (primary audience: all). Trusted Solaris 8 Reference Manual (835-8010-10) is the online version; it is an AnswerBook collection with nine sections.

• The Trusted Solaris 8 Roadmap (805-8113-10) --this document.

Trusted Solaris 8 Printed Documentation

Four printed Trusted Solaris 8 documents are shipped with the software: Trusted Solaris 8 Release Notes, Trusted Solaris Installation and Configuration, Trusted Solaris 8 Transition Guide, and this guide, Trusted Solaris 8 Roadmap. The Trusted Solaris 8 Installation and Configuration on the Sun Enterprise 10000 (SPARC only) is shipped with the Trusted Solaris Supplemental Software for the Sun Enterprise 10000. Since the Trusted Solaris operating environment is based on the Solaris environment, Trusted Solaris customers who rely on Trusted Solaris documentation are expected to have access to the Solaris documentation as well. The Solaris documentation can be ordered from http://www1.fatbrain.com/documentation/sun.

Online Documentation and Man Pages

All Trusted Solaris manuals are available in online format from the Trusted Solaris 8 AnswerBook CD-ROM (704-7506-10) and at the Sun website: http://www.sun.com/docs and can be printed from these sources if desired.

In addition to the online documentation, online help is provided in the Trusted Solaris operating environment through the Front Panel help icon, help menus, and help buttons.

An extensive library of man pages for the Trusted Solaris 8 operating environment is available in the Trusted Solaris 8 Reference Manual mentioned above and from the command line using the man(1) command.

If a man page is in both the Solaris and the Trusted Solaris reference manuals, refer to the man page in the Trusted Solaris 8 Reference Manual, since it includes the differences unique to the Trusted Solaris operating environment.

For an overview of the Trusted Solaris environment with a complete listing of available commands, see the following introductory man pages for each section of the reference manual:

• Intro(1)

• Intro(1M)

• Intro(2)

• Intro(3)

• Intro(4)

• Intro(5)

• Intro(7)

• Intro(9)

• Intro(9F)

Accessing Trusted Solaris Man Pages

The man pages for the Trusted Solaris environment reside in three different directories. For the man command to find all the Trusted Solaris man pages, your man page path needs to be set to find the three directories in the following list, along with any other directories where man pages are installed at your site.

• /usr/man

• /usr/openwin/man

• /usr/dt/man

For C shell users, the MANPATH variable can be set individually by users in their shell initialization files or globally by administrators in site-wide shell initialization files in /etc/skel (or alternate skeleton directory) to be copied into the home directories for all users. To set the MANPATH variable, enter:

trusted% setenv MANPATH="/usr/dt/man:/usr/openwin/man:/usr/man:$MANPATH"

To check a system's current MANPATH setting, enter:

echo $MANPATH

This should display the three paths mentioned above and any other paths to man pages at your site.

Specifying Man Pages by Section Number

To check whether different versions of a topic exist in different sections, enter man with the -l option:

trusted% man -l topic

To specify man pages by section, use the man with the -s option:

trusted % man -s sectionnumber topic

The following example shows the results of using the -l option to find all the Intro man pages.

trusted% man -l Intro
Intro (1)   -M /usr/man
Intro (1m)  -M /usr/man
Intro (2)   -M /usr/man
Intro (3)   -M /usr/man
Intro (9f)  -M /usr/man
Intro (9s)  -M /usr/man
Intro (9e)  -M /usr/man
Intro (9)   -M /usr/man
Intro (4)   -M /usr/man
Intro (5)   -M /usr/man
Intro (7)   -M /usr/man
Intro (6)   -M /usr/man

By default, if you enter man topic in the Trusted Solaris environment without specifying the section and there are multiple sections containing man pages with the same name, the man page for the lowest numbered section displays, for example:

trusted% man Intro 
Trusted Solaris User Commands                                Intro(1)
NAME
     Intro, intro - Introduction to commands and application programs

DESCRIPTION
  ...

The following example illustrates specifying a section number:

trusted% man -s7 intro
Trusted Solaris Device and Network Interfaces              Intro(7)

NAME
     Intro, intro - Introduction to special files

DESCRIPTION
      ...

Installing the Trusted Solaris Operating Environment

Installation and configuration of the Trusted Solaris environment involves more than loading executable files, entering your site's data, and setting configuration variables; it requires considerable background for making decisions related to your site's security policies. Trusted Solaris provides a unique environment based on the following concepts:

• Superuser has been eliminated. No one can log in as or su to root.

• Users are limited to those applications necessary for performing their jobs.

• Capabilities formerly assigned to superuser are available to separate, discrete "roles" to be assigned to a limited number of users.

• In addition to UNIX permissions, access to data is controlled by special security tags called labels which are assigned to users and objects (such as data files and directories).

• The ability to override security policy can be assigned to specific users and applications.

To familiarize yourself with the Trusted Solaris environment, you should at a minimum read the Trusted Solaris User's Guide and the Trusted Solaris Administration Overview. You should also be familiar with the rest of the documentation set, which is described in the "Trusted Solaris 8 Documentation Set". It is highly recommended that you attend a "Trusted Solaris for System Administrators" course, available from Sun Educational Services at http://suned.sun.com/catalog/index.html. Ask your Sun account representative to help you schedule it.

Before installing, you should read Trusted Solaris Installation and Configuration thoroughly so that you can devise an installation strategy. Other useful information for the installation process is contained in the Solaris 8 Installation Collection. The manual, Solaris 8 Sun Hardware Platform Guide, contains important information in the following chapters:

• "Supported Sun Hardware"

• "Updating the Flash PROM on the Ultra 1, Ultra 2, Ultra 450, and Sun Enterprise 450 Systems"

• "Updating the Flash PROM on the Sun Enterprise 3x00, 4x00, 5x00, and 6x00 Systems"

  ---

  Note -

  Ultra^TM 1, 2, 450, and Sun Enterprise^TM 450, 3x00, 4x00, 5x00, and 6x00 systems need a Flash PROM upgrade to enable 64-bit operations. The previous two chapters mentioned above describe how to do the upgrade if 64 bit operation is desired.

  ---

• "Installing the Solaris Operating Environment With the SPARCstorage Array"

Do not use "Alternate Pathing 2.3 on the Sun Enterprise 10000 Server" and "Solaris 8 on the Sun Enterprise 10000 Server." Instead, follow the instructions in Trusted Solaris 8 Installation and Configuration on the Sun Enterprise 10000.

Although there are a lot of similarities between installing the Trusted Solaris 8 and Solaris 8 operating environments there are major differences as well, such as:

• You cannot upgrade from a Solaris to a Trusted Solaris environment or from a prior version of the Trusted Solaris environment.

• The disk space requirements differ between the two products.

• Solaris Web Start installation is not supported.

The additional procedures required for a trusted system are provided in Trusted Solaris Installation and Configuration with pointers to other relevant documentation.

Installing and Using the Online Documentation Viewer

This section contains the following topics:

• "Viewing AnswerBook2 Documents"

• "To Install the AnswerBook2 Server Software"

• "To Install AnswerBook2 Document Collections"

• "CD Contents"

Viewing AnswerBook2 Documents

AnswerBook2 is an online documentation system from Sun Microsystems, Inc. It consists of SGML source documentation and AnswerBook2 server software. The documents can be viewed using any web browser that supports HTML 3.2, by entering the name of the server host, followed by a colon (:) and the port number. For example, to access documentation displayed on a remote documentation server at the default port, enter http://doc_server_name:8888.

For a complete description of AnswerBook2 features, see "Introduction to the AnswerBook2 Product" in Solaris 8 (SPARC Platform Edition) Installation Library or "Introduction to the AnswerBook2 Product" in Solaris 8 (Intel Platform Edition) Installation Library. For information on viewing documentation using AnswerBook2, see "Getting Started" in Solaris 8 (SPARC Platform Edition) Installation Library or "Getting Started" in Solaris 8 (Intel Platform Edition) Installation Library.

AnswerBook2 server software can be installed in either the Solaris or Trusted Solaris operating environment. If the server host is running the Solaris 8 operating environment, use the version of the AnswerBook2 server software provided on the Solaris 8 Documentation CD and follow the instructions in "Installing Documentation Server Software" in Solaris 8 (SPARC Platform Edition) Installation Library or "Installing Documentation Server Software" in Solaris 8 (Intel Platform Edition) Installation Library.

If the server host is running in the Trusted Solaris 8 operating environment, install the AnswerBook2 server software from the Trusted Solaris Documentation CD and follow the instructions in the next section.

To install the Trusted Solaris AnswerBook2 documentation server, you must be running the Trusted Solaris 8 operating environment on either a SPARCstation 5 or higher or an Intel-based personal computer. You need approximately 36 Megabytes of hard disk space available for the server software plus approximately 55 megabytes for the Trusted Solaris-related collections, and up to 600 megabytes for all available collections.

You cannot install the AnswerBook packages in the Trusted Solaris environment using WebStart. You cannot run the AnswerBook server or the AnswerBook2 server from the CD.

To Install the AnswerBook2 Server Software

You cannot install the server software from the Solaris Documentation CD in the Trusted Solaris environment or install the server software from the Trusted Solaris Documentation CD in the Solaris environment.

In the Trusted Solaris environment, install the AnswerBook2 server software from the Trusted Solaris Documentation CD only. This procedure describes how to install the AnswerBook2 server. For installing the server software from the Solaris Documentation CD in the Solaris environment, see "Accessing Online Documentation" in Solaris 8 (SPARC Platform Edition) Installation Library

1. Assume the administrator role and go to an ADMIN_LOW workspace.

   See "Assuming a Role and Working in a Role Workspace" in Trusted Solaris Administrator's Procedures, if needed.

2. Allocate the CD-ROM device.

   See "Device Management Procedures" in Trusted Solaris Administrator's Procedures for how to allocate the device, if needed.

   1. Move the device to the Allocated Devices list.

   2. Open the CD-ROM device when prompted and insert the Trusted Solaris 8 Documentation CD.

   3. Click OK to confirm the insertion.

   4. Click OK to mount the CD-ROM.

3. Open a terminal and change to the directory where the documentation server packages are located.

   Use the following path on a SPARC system:

   $ cd /cdrom/trusted_sol_8_doc/Solaris_8_Doc/sparc/Product

   Use the following path on an Intel architecture system:

   $ cd /cdrom/trusted_sol_8_doc/Solaris_8_Doc/i386/Product

4. Run pkgadd(1M) and select the three server software packages.

   $ pkgadd -d .

   Select these server software packages:

   • SUNWab2r - Installs in root partition and provides configuration and start-up files.

   • SUNWab2s - Provides shared files for performing document processing.

   • SUNWab2u - Provides executable and back-end processing files for server and administration functions.

5. Using the Device Allocation Manager, deallocate the CD-ROM, remove the CD, and click OK to dismiss the dialog.

6. Install the document collections as described in "To Install AnswerBook2 Document Collections".

   You will reboot the system after the document collections are installed.

To Install AnswerBook2 Document Collections

You can install collections from the Trusted Solaris 8 Documentation CD, the Solaris 8 Documentation CD, or from other locations. You can install Trusted Solaris collections in either the Trusted Solaris or Solaris environment, and you can also install Solaris collections in the Trusted Solaris environment. This section describes how to install collections on a Trusted Solaris host. For installing the server software from the Solaris Documentation CD in the Solaris environment, see "Accessing Online Documentation" in Solaris 8 (SPARC Platform Edition) Installation Library.

1. Assume the administrator role and go to an ADMIN_LOW workspace.

   See "Assuming a Role and Working in a Role Workspace" in Trusted Solaris Administrator's Procedures, if needed.

2. If installing from a documentation CD, insert the CD into the CD-ROM device and allocate the device as described in the previous section.

3. Change to the directory where the document packages are located.

   If you are installing from the Trusted Solaris Documentation CD, use the following path.

   $ cd /cdrom/trusted_sol8_doc/Solaris_8_Doc/common/Product

   If you are installing from the Solaris^TM 8 Documentation CD, use the following path.

   $ cd /cdrom/sol_8_doc/Solaris_8_Doc/common/Product

4. Use the pkgadd(1M) installation utility.

   $ pkgadd -d .

5. For each documentation CD, select collections to install.

6. When prompted, answer 2 [heavy] installation, Return for AnswerBook location, and y for superuser capabilities during installation.

7. Deallocate each CD, as described in Step 5.

8. Reboot the system when all collections and the servers have been installed.

9. Make sure all collections are available.

   Launch any web browser and enter the name of the host running the server software. For example, on the Netscape browser, you would enter http://server_name:8888 in the Location field.

   Location: http://server_name:8888

   All the collections that you have installed should display in the browser window.

CD Contents

The Trusted Solaris 8 Documentation CD includes the following directories:

• /cdrom/trusted_sol_8_doc/README

  Top-level directory containing a README.html file.

• /cdrom/trusted_sol_8_doc/Solaris_8_Doc/sparc/Product/

  Contains the AnswerBook2 server software for installation on a SPARC-based system.

• /cdrom/trusted_sol_8_doc/Solaris_8_Doc/i386/Product/

  Contains the AnswerBook2 server software for installation on an Intel-based system.

• /cdrom/trusted_sol_8_doc/Solaris_8_Doc/common/Product

  Contains the Trusted Solaris manual collections in AnswerBook2 format.

The following tables show the contents of the AnswerBook collections included on the Trusted Solaris Documentation CD.