System Administration Guide: Security Services

ASET Environment Variables

The following is a list of the ASET environment variables and the values that the variables specify.

ASETDIR

Specifies the ASET working directory

ASETSECLEVEL

Specifies the security level

PERIODIC_SCHEDULE

Specifies the periodic schedule

TASKS

Specifies which ASET tasks to run

UID_ALIASES

Specifies an aliases file

YPCHECK

Determines whether to extend checks to NIS maps and NIS+ tables

CKLISTPATH_LOW

Is the directory list for low security

CKLISTPATH_MED

Is the directory for medium security

CKLISTPATH_HIGH

Is the directory list for high security

The environment variables that are listed in the following sections are found in the /usr/aset/asetenv file. The ASETDIR and ASETSECLEVEL variables are optional. The variables can be set only through the shell by using the /usr/aset/aset command. The other environment variables can be set by editing the file.

ASETDIR Environment Variable

ASETDIR specifies an ASET working directory.

From the C shell, type:


% setenv ASETDIR pathname 

From the Bourne shell or the Korn shell, type:


$ ASETDIR=pathname
$ export ASETDIR

Set pathname to the full path name of the ASET working directory.

ASETSECLEVEL Environment Variable

The ASETSECLEVEL variable specifies a security level at which ASET tasks are executed.

From the C shell, type:


% setenv ASETSECLEVEL level

From the Bourne shell or the Korn shell, type:


$ ASETSECLEVEL=level
$ export ASETSECLEVEL

In these commands, level can be set to one of the following:

low

Low security level

med

Medium security level

high

High security level

PERIODIC_SCHEDULE Environment Variable

The value of PERIODIC_SCHEDULE follows the same format as the crontab file. Specify the variable value as a string of five fields enclosed in double quotation marks, with each field separated by a space:


"minutes hours day-of-month month day-of-week"
minutes hours

Specifies start time in number of minutes (0-59) after the hour and the hour (0-23).

day-of-month

Specifies the day of the month when ASET should be run, with values from 1-31.

month

Specifies the month of the year when ASET should be run, with values from 1-12.

day-of-week

Specifies the day of the week when ASET should be run, with values from 0-6. Sunday is day 0.

The following rules apply when creating a periodic schedule for ASET:

The default entry for the PERIODIC_SCHEDULE variable causes ASET to execute at 12:00 midnight every day:


PERIODIC_SCHEDULE=”0 0 * * *” 

TASKS Environment Variable

The TASKS variable lists the tasks that ASET performs. The default is to list all seven tasks:


TASKS=”env sysconfig usrgrp tune cklist eeprom firewall”

UID_ALIASES Environment Variable

The UID_ALIASES variable specifies an aliases file. If present, ASET consults this file for a list of permitted multiple aliases. The format is UID_ALIASES=pathname, where pathname is the full path name of the aliases file.

The default is as follows:


UID_ALIASES=${ASETDIR}/masters/uid_aliases

YPCHECK Environment Variable

The YPCHECK variable extends the task of checking system tables to include NIS or NIS+ tables. The YPCHECK variable is a Boolean variable, which can be set to either true or false.

The default is false, which confines the checking to local system tables:


YPCHECK=false

CKLISTPATH_level Environment Variables

The three checklist path variables list the directories to be checked by the system files checks task. The following definitions of the variables are set by default. The definitions illustrate the relationship between the variables at different levels:


CKLISTPATH_LOW=${ASETDIR}/tasks:${ASETDIR}/util:${ASETDIR}/masters:/etc
CKLISTPATH_MED=${CKLISTPATH_LOW}:/usr/bin:/usr/ucb
CKLISTPATH_HIGH=${CKLISTPATH_MED}:/usr/lib:/sbin:/usr/sbin:/usr/ucblib

The values for the checklist path environment variables are similar to the values of the shell path variables. Like the shell path variables, the checklist path environment variables are lists of directory names. The directory names are separated by colons. You use an equal sign (=) to connect the variable name to its value.