Trusted Solaris Installation and Configuration

To Set Up Administration by Serial Login

Follow this procedure only if you do not have a desktop system with which to configure the headless system. This procedure is not secure.

  1. In single user mode on the headless system, modify the /etc/passwd entry for the install user. Change the install user's shell from /bin/false to /bin/pfsh.

  2. Modify the /etc/inittab file to spawn a console login on the serial console. Use the vi command to change the last line of /etc/inittab to:


    co:234:respawn:/usr/lib/saf/ttymon -g -h -p "`uname -n` console login: " \
     -T sun -d  /dev/console -l console -m ldterm,ttcompat

    The line above is broken with a backslash for printing convenience. You should not break the line in the /etc/inittab file.

  3. On the headless system, modify the /etc/security/user_attr entry for the install user to include the Primary Administrator profile.


    install...;profiles=...,Primary Administrator;

    The Primary Administrator profile includes privileged shells. The install user can now run privileged commands.