test

SunScreen 3.1 Installation Guide

Before You Install

SunScreen 3.1 software should be installed by the root role. However, before you can install the software, you have to assign the corresponding SunScreen profiles to the root role.

To Edit the System Profile

The first task is to append the SunScreen or SunScreen Admin profile to Trusted Solaris system profile.

  1. Login as sys or as a user who at least has file_owner, and file_dac_write, privileges.

  2. From the front panel, choose Allocate Device then select device cdrom0 and mount it.

    Note -

    Before you proceed, you should make a backup copy of the original system profile.

  3. For installing the Screen software, run the following commands:

    cat /cdrom/cdrom0/TS/tsolprof.sunscreen >>/etc/security/tsolprof

    cat /cdrom/cdrom0/TS/vfstab_adjunct.sunscreen >>/etc/security/tsol/vfstab_adjunct;

  4. For installing Administration software, run the following commands:

    cat /cdrom/cdrom0/tsolprof.sunscreenadm >>/etc/security/tsol/tsolprof;

    cat /cdrom/cdrom0/vfstab_adjunct.sunscreen >>/etc/security/tsol/vfstab_adjunct

To Give the Install Program the Proper Role

Before you install the software, you must make the secadmin role assumable by the user who will be performing the installation. You need the secadmin role to assign the profile to root role. In Trusted Solaris, root is not supposed to assign a profile to itself. In the following procedure, the user named install will be used as an example.

  1. Login as install and assume the root role.

  2. In the root workspace, open Applications -> Solstics_Apps User Manager.

  3. Open-User Manager, double click on user install then choose Roles ... Next, make root and secadmin be the assumable roles.

  4. Log out.

To Assign the Profile to the Root Role

The last task is to assign a SunScreen profile or a SunScreen Admin profile to root role.

  1. Login as install or some other user.

  2. Assume secadmin role.

  3. In secadmin workspace, open Applications -> Solstics Apps -> User Manager.

  4. Open User Manager, double click on user root, choose Profiles.

  5. Assign the profile SunScreen in the available list to the selected list .

    Note -

    If you are installing an Administration Station, assign the profile 'SunScreen Admin.'

  6. Save the changes.