Trusted Solaris 8 4/01 Roadmap

This purpose of this document is to help you get started understanding and installing the Trusted Solaris^TM operating environment. It provides:

• "Trusted Solaris 8 4/01 Materials" - A list of materials shipped with the product

• "Documentation Overview" - An overview of the documentation including online, hardcopy, and man pages

• "Installing the Trusted Solaris Operating Environment" - Information needed prior to installing Trusted Solaris software and documentation

• "Installing and Using the Online Documentation Viewer" - Instructions on installing AnswerBook2^TM, the online documentation viewer, and the AnswerBook collections, and viewing the AnswerBook collections

Trusted Solaris 8 4/01 Materials

The Trusted Solaris 8 4/01 package includes the following materials:

• 4 Trusted Solaris 8 4/01 Software CDs:

  • 2 SPARC^TM Architecture (C locale) CDs

  • 2 Intel Architecture (C locale) CDs

• Trusted Solaris 8 4/01 Documentation CD - Contains the Answerbook2 server software and the following collections:

  • Trusted Solaris 8 4/01 Collection (175.5)

  • Trusted Solaris 8 4/01 Reference Manual Collection (475.3)

  • Solaris 8 4/01 on Sun Hardware Collection (28.24)

  • Solaris 8 Maintenance Update Collection (472.4)

  • Solaris 8 4/01 Installation Collection (214.7)

  • Solaris 8 4/01 Release Documents Collection (591.7)

  • Solaris 8 4/01 Update Collection (736.1)

• Solaris 8 4/01 Documentation CD - Includes the Solaris software documentation and the CDE documentation to supplement the Trusted Solaris documentation. Only the documentation localized for the C locale is available in this package. Solaris documentation for other locales can be purchased separately.

  ---

  Note -

  If you are displaying the online documentation from a Trusted Solaris server, you must install the version of the AnswerBook2 server software from the Trusted Solaris 8 4/01 Documentation CD. If you are displaying the documentation from a Solaris server, then install the AnswerBook2 server software from the Solaris 8 4/01 documentation CD.

  ---

• Solaris Device Configuration Assistant Diskette (Intel Architecture only) - Necessary for loading the Trusted Solaris operating environment onto the Intel Architecture platform.

• Trusted Solaris Installation and Configuration printed guide (816-1040-10) - Describes the planning and prerequisite knowledge necessary for installing and configuring the Trusted Solaris 8 4/01 operating environment. See description in next section.

• Trusted Solaris 8 4/01 Release Notes printed guide (816-1043-10) - Provides necessary information for the Trusted Solaris 8 4/01 operating environment. See description in next section.

• The Trusted Solaris 8 4/01 Roadmap printed guide (816-1039-10) - This document.

• Trusted Solaris 8 4/01 Transition Guide (816-1044-10) - Describes the differences between the Trusted Solaris 7 release (including its modified desktop, windows, and administration tools), the Solaris 8 4/01 release, and the Trusted Solaris 8 operating environment. Changes from the Trusted Solaris 8 to the Trusted Solaris 8 4/01 release are also described.

Documentation Overview

Since the Trusted Solaris 8 4/01 operating environment is based on the Solaris 8 4/01 operating environment, you need access to the complete Solaris 8 4/01 documentation set in addition to the Trusted Solaris 8 4/01 documentation. The Trusted Solaris documentation set focuses on the those aspects of the environment that are different from the Solaris environment. The set is available in both printed and online versions.

Trusted Solaris 8 4/01 Documentation Set

The Trusted Solaris documentation set consists of the following books:

• Trusted Solaris 8 4/01 Release Notes (816-1043-10) describes late-breaking news about Trusted Solaris 8 4/01 software. It lists known problems and describes workarounds. (Primary audience: administrators; Secondary audience: developers, end users)

• Trusted Solaris 8 4/01 Installation and Configuration (816-1040-10) describes how to install the Trusted Solaris operating environment at networked and non-networked sites. (Primary audience: administrators; Secondary audience: developers)

• Trusted Solaris User's Guide (816-1041-10) describes the basic features of the Trusted Solaris environment from the end user's point of view. It explains basic concepts and provides a glossary of terms. (Primary audience: end users, administrators; Secondary audience: developers)

• Trusted Solaris Administration Overview (816-1047-10) explains the concepts of administration in the Trusted Solaris operating environment and provides an overview of administrative tools and commands. (Primary audience: administrators; Secondary audience: developers)

• Trusted Solaris Administrator's Procedures (816-1048-10) provides detailed information for performing specific administrative tasks. (Primary audience: administrators; Secondary audience: developers)

• Trusted Solaris Audit Administration (816-1049-10) provides detailed information about the auditing system. (Primary audience: administrators; Secondary audience: developers)

• Trusted Solaris Label Administration (816-1050-10) provides information on specifying label components in the label encodings file. (Primary audience: administrators)

• Trusted Solaris Developer's Guide (816-1042-10) describes how to develop applications for the Trusted Solaris environment. (Primary audience: developers; Secondary audience: administrators)

• Compartmented Mode Workstation Labeling: Encodings Format (816-1051-10) describes the syntax used in the label encodings file for enforcing the various rules concerning well-formed labels for a system. This is a third-party document, written by the MITRE Corporation specifically for the U.S. government. It complements Trusted Solaris Label Administration. (Primary audience: administrators; Secondary audience: developers)

• Trusted Solaris 8 4/01 Transition Guide (816-1044-10) provides an overview of the differences between earlier versions of the Trusted Solaris, Solaris 8 4/01, and Trusted Solaris 8 4/01 operating environments. It also covers the differences between Solaris 8 4/01 software, Solaris Management Console 2.0, CDE 1.4.4, and their implementation in Trusted Solaris 8 4/01 software. (Primary audience: administrators, end users; Secondary audience: developers)

• Trusted Solaris 8 4/01 Reference Manual (816-1052-10) provides a printed version of all Trusted Solaris man pages in four volumes. Trusted Solaris 8 4/01 Reference Manual (AnswerBook2 Collection 475.3) is the online version. (Primary audience: all)

• Trusted Solaris 8 4/01 Roadmap (816-1039-10) - This document.

Trusted Solaris 8 4/01 Printed Documentation

Four printed Trusted Solaris 8 4/01 documents are shipped with the software: Trusted Solaris 8 4/01 Release Notes, Trusted Solaris Installation and Configuration, Trusted Solaris 8 4/01 Transition Guide, and this guide, Trusted Solaris 8 4/01 Roadmap.

Since the Trusted Solaris operating environment is based on the Solaris environment, Trusted Solaris customers who rely on Trusted Solaris documentation are expected to have access to the Solaris documentation as well. The Solaris documentation can be ordered from http://www1.fatbrain.com/documentation/sun.

Online Documentation and Man Pages

All Trusted Solaris books are available in online format from the Trusted Solaris 8 4/01 AnswerBook CD-ROM (704-7949-10) and at the Sun website: http://www.sun.com/docs and can be printed from these sources if desired.

In addition to the online documentation, online help is provided in the Trusted Solaris operating environment through the Front Panel help icon and the Solaris Management Console help system.

An extensive library of man pages for the Trusted Solaris 8 4/01 operating environment is available in the Trusted Solaris 8 4/01 Reference Manual mentioned above and from the command line using the man(1) command.

If a man page is in both the Solaris and the Trusted Solaris reference manuals, refer to the man page in the Trusted Solaris 8 4/01 Reference Manual, since it includes the differences unique to the Trusted Solaris operating environment.

For an overview of the Trusted Solaris environment with a complete listing of available commands, see the following introductory man pages for each section of the reference manual:

• Intro(1)

• Intro(1M)

• Intro(2)

• Intro(3)

• Intro(4)

• Intro(5)

• Intro(7)

• Intro(9)

• Intro(9F)

Accessing Trusted Solaris Man Pages

The man pages for the Trusted Solaris environment reside in three different directories. For the man command to find all the Trusted Solaris man pages, your man page path needs to be set to find the three directories in the following list, along with any other directories where man pages are installed at your site.

• /usr/man

• /usr/openwin/man

• /usr/dt/man

For C shell users, the MANPATH variable can be set individually by users in their shell initialization files or globally by administrators in site-wide shell initialization files. To set the MANPATH variable, enter:

% setenv MANPATH="/usr/dt/man:/usr/openwin/man:/usr/man:$MANPATH"

To check a system's current MANPATH setting, enter:

% echo $MANPATH

This command displays the three paths mentioned above and any other paths to man pages at your site.

Installing the Trusted Solaris Operating Environment

Installing and configuring the Trusted Solaris environment involves more than loading executable files, entering your site's data, and setting configuration variables. It requires considerable background for making decisions related to your site's security policies. Trusted Solaris software provides a unique environment based on the following concepts:

• Superuser has been eliminated. No one can log in as or su to root.

• Users are limited to those applications necessary for performing their jobs.

• Capabilities formerly assigned to superuser are available to separate, discrete "roles" to be assigned to a limited number of users.

• In addition to UNIX® permissions, access to data is controlled by special security tags called labels which are assigned to users and objects (such as data files and directories).

• The ability to override security policy can be assigned to specific users and applications.

To familiarize yourself with the Trusted Solaris environment, you should at a minimum read the Trusted Solaris User's Guide and the Trusted Solaris Administration Overview. You should also be familiar with the rest of the documentation set, which is described in "Trusted Solaris 8 4/01 Documentation Set". It is highly recommended that you attend a "Trusted Solaris for System Administrators" course, available from Sun Educational Services at http://suned.sun.com/catalog/index.html. Ask your Sun account representative to help you schedule it.

Before installing, you should read Trusted Solaris Installation and Configuration thoroughly so that you can devise an installation strategy. Other useful information for the installation process is contained in the Solaris 8 4/01 Installation Collection. The manual, Solaris 8 4/01 Sun Hardware Platform Guide, contains important information in the following chapters:

• "Supported Sun Hardware"

• "Updating the Flash PROM on the Ultra 1, Ultra 2, Ultra 450, and Sun Enterprise 450 Systems"

  Ultra^TM 1, 2, 450, and Sun Enterprise^TM 450, 3x00, 4x00, 5x00, and 6x00 systems need a Flash PROM upgrade to enable 64-bit operations.

Although there are many similarities between installing the Trusted Solaris 8 4/01 and Solaris 8 4/01 operating environments there are major differences as well, such as:

• You cannot upgrade from a Solaris to a Trusted Solaris environment. You can upgrade from a Trusted Solaris 8 version of the Trusted Solaris environment.

• The disk space requirements differ between the two products.

• Solaris^TM Web Start installation is not supported.

The additional procedures required for a trusted system are provided in Trusted Solaris Installation and Configuration with pointers to other relevant documentation.

Installing and Using the Online Documentation Viewer

This section contains the following topics:

• "Viewing AnswerBook2 Documents"

• "To Install the AnswerBook2 Server Software"

• "To Install AnswerBook2 Document Collections"

• "CD Contents"

Viewing AnswerBook2 Documents

AnswerBook2 is an online documentation system from Sun Microsystems, Inc. It consists of SGML source documentation and AnswerBook2 server software. The documents can be viewed using any web browser that supports HTML 3.2, by entering the name of the server host, followed by a colon (:) and the port number. For example, to access documentation displayed on a remote documentation server at the default port, enter http://doc_server_name:8888.

For a complete description of AnswerBook2 features, see "Introduction to the AnswerBook2 Product" in Solaris 7 (SPARC Platform Edition) Installation Library or "Introduction to the AnswerBook2 Product" in Solaris 7 (Intel Platform Edition) Installation Library. For information on viewing documentation using AnswerBook2, see "Getting Started" in Solaris 7 (SPARC Platform Edition) Installation Library or "Getting Started" in Solaris 7 (Intel Platform Edition) Installation Library.

AnswerBook2 server software can be installed in either the Solaris or Trusted Solaris operating environment. If the server host is running the Solaris 8 4/01 operating environment, use the version of the AnswerBook2 server software provided on the Solaris 8 4/01 Documentation CD and follow the instructions in "Installing Documentation Server Software" in Solaris 7 (SPARC Platform Edition) Installation Library or "Installing Documentation Server Software" in Solaris 7 (Intel Platform Edition) Installation Library.

If the server host is running in the Trusted Solaris 8 4/01 operating environment, install the AnswerBook2 server software from the Trusted Solaris Documentation CD and follow the instructions in the next section.

To install the Trusted Solaris AnswerBook2 documentation server, you must be running the Trusted Solaris 8 4/01 operating environment on either a SPARCstation 5 or higher or an Intel-based personal computer. You need approximately 36 Megabytes of hard disk space available for the server software plus approximately 55 megabytes for the Trusted Solaris-related collections, and up to 600 megabytes for all available collections.

You cannot install the AnswerBook packages in the Trusted Solaris environment using WebStart. You cannot run the AnswerBook server or the AnswerBook2 server from the CD.

To Install the AnswerBook2 Server Software

You cannot install the server software from the Solaris Documentation CD in the Trusted Solaris environment or install the server software from the Trusted Solaris Documentation CD in the Solaris environment.

In the Trusted Solaris environment, install the AnswerBook2 server software from the Trusted Solaris Documentation CD only. This procedure describes how to install the AnswerBook2 server. For installing the server software from the Solaris Documentation CD in the Solaris environment, see "Accessing Online Documentation" in Solaris 8 4/01 (SPARC Platform Edition) Installation Library.

1. Assume the system administrator (admin) role and go to an ADMIN_LOW workspace.

   See "Administering Systems in an Administrative Role" in Trusted Solaris Administrator's Procedures, if needed.

2. Allocate the CD-ROM device With the Device Allocation Manager.

   1. Click the Tools subpanel on the Front Panel, and click the Device Allocation icon.

   2. Move the device to the Allocated Devices list.

   3. Open the CD-ROM device when prompted and insert the Trusted Solaris 8 4/01 Documentation CD.

   4. Click OK to confirm the insertion.

   5. Click OK to mount the CD-ROM.

3. Open a terminal and change to the directory where the documentation server packages are located.

   Use the following path on a SPARC system:

   $ cd /cdrom/trusted_sol_8_doc/Solaris_8_Doc/sparc/Product

   Use the following path on an Intel architecture system:

   $ cd /cdrom/trusted_sol_8_doc/Solaris_8_Doc/i386/Product

4. Run pkgadd(1M) and select the three server software packages.

   $ pkgadd -d .

   Select these server software packages:

   • SUNWab2r - Installs in root partition and provides configuration and start-up files.

   • SUNWab2s - Provides shared files for performing document processing.

   • SUNWab2u - Provides executable and back-end processing files for server and administration functions.

5. Using the Device Allocation Manager, deallocate the CD-ROM, remove the CD, and click OK to dismiss the dialog.

6. Install the document collections as described in "To Install AnswerBook2 Document Collections".

   You will reboot the system after the document collections are installed.

To Install AnswerBook2 Document Collections

You can install collections from the Trusted Solaris 8 4/01 Documentation CD, the Solaris 8 4/01 Documentation CD, or from other locations. You can install Trusted Solaris collections in either the Trusted Solaris or Solaris environment, and you can also install Solaris collections in the Trusted Solaris environment. This section describes how to install collections on a Trusted Solaris host. For installing the server software from the Solaris Documentation CD in the Solaris environment, see "Accessing Online Documentation" in Solaris 8 4/01 (SPARC Platform Edition) Installation Library.

1. Assume the system administrator (admin) role and go to an ADMIN_LOW workspace.

2. If installing from a documentation CD, insert the CD into the CD-ROM device and allocate the device as described in the previous section.

3. Change to the directory where the document packages are located.

   If you are installing from the Trusted Solaris Documentation CD, use the following path.

   $ cd /cdrom/trusted_sol8_doc/Solaris_8_Doc/common/Product

   If you are installing from the Solaris 8 Documentation CD, use the following path.

   $ cd /cdrom/sol_8_doc/Solaris_8_Doc/common/Product

4. Use the pkgadd(1M) installation utility.

   $ pkgadd -d .

5. For each documentation CD, select collections to install.

6. When prompted, answer 2 [heavy] installation, Return for AnswerBook location, and y for superuser capabilities during installation.

7. Deallocate each CD, as described in Step 5 in "To Install the AnswerBook2 Server Software".

8. Reboot the system when all collections and the servers have been installed.

9. Make sure all collections are available.

   Launch any web browser and enter the name of the host running the server software. For example, on the Netscape browser, you would enter http://server_name:8888 in the Location field.

   Location: http://server_name:8888

   All the collections that you have installed should display in the browser window.

CD Contents

The Trusted Solaris 8 4/01 Documentation CD includes the following directories:

• /cdrom/trusted_sol_8_doc/README

  Top-level directory containing a README.html file.

• /cdrom/trusted_sol_8_doc/Solaris_8_Doc/sparc/Product/

  Contains the AnswerBook2 server software for installation on a SPARC-based system.

• /cdrom/trusted_sol_8_doc/Solaris_8_Doc/i386/Product/

  Contains the AnswerBook2 server software for installation on an Intel-based system.

• /cdrom/trusted_sol_8_doc/Solaris_8_Doc/common/Product

  Contains the Trusted Solaris documentation collections in AnswerBook2 format.

The following tables show the contents of the AnswerBook collections included on the Trusted Solaris Documentation CD.