Modifying the Boot-Time Tnrhdb File

Local versions of the tnidb(4) and tnrhdb(4) files reside in the /etc/security/tsol directory on every Trusted Solaris computer. These local files are consulted before the system is configured and before the naming server is available. As delivered, the local tnrhdb file has a wildcard entry, 0.0.0.0:admin_low.

The admin_low template may be a security risk on a Trusted Solaris network. Depending on site security requirements, the Security Administrator role may remove the 0.0.0.0 entry once the computer is installed. If it is removed, it must be replaced with entries for every computer the host contacts during boot. Alternatively, the 0.0.0.0 wildcard entry may be assigned a different unlabeled template.

See "To Replace the 0.0.0.0 Entry in the Local Tnrhdb File" for how to change or remove the entry.