System Administration Guide: Security Services
    
P
 
 packet transfers
  firewall security ( Index Term Link )
  packet smashing ( Index Term Link )
 
 PAM
  add a module ( Index Term Link )
  configuration file ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  control flags ( Index Term Link )
  /etc/syslog.conf file ( Index Term Link )
  module types ( Index Term Link )
  modules ( Index Term Link )
  overview ( Index Term Link )
  password mapping ( Index Term Link )
  planning ( Index Term Link )
  SEAM and ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  service names ( Index Term Link )
  stacking ( Index Term Link )
  try_first_pass ( Index Term Link )
 
 pam_*.so.1 files, description ( Index Term Link )
 
 pam.conf file
  description ( Index Term Link )
  SEAM and ( Index Term Link )
 
 pam_roles command, description ( Index Term Link )
 
 panels, table of SEAM Administration Tool ( Index Term Link )
 
 passphrase, example ( Index Term Link )
 
 passwd command
  and kpasswd command ( Index Term Link )
  try_first_pass ( Index Term Link )
 
 passwd file
  ASET checks ( Index Term Link )
  /etc/d_passwd file and ( Index Term Link )
 
 passwd service name, PAM ( Index Term Link )
 
 password mapping, in PAM ( Index Term Link )
 
 PasswordAuthentication keyword, sshd_config file ( Index Term Link )
 
 passwords
  and policies ( Index Term Link )
  capturing encrypted passwords ( Index Term Link )
  changing with kpasswd command ( Index Term Link )
  changing with passwd command ( Index Term Link )
  dial-up passwords
   disabling dial-up logins temporarily ( Index Term Link )
   /etc/d_passwd file ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
   /etc/dialups file ( Index Term Link )
  displaying users with no passwords ( Index Term Link )
  eeprom security ( Index Term Link )
  eliminating in Secure Shell use ( Index Term Link ) ( Index Term Link )
  login security ( Index Term Link ) ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  management ( Index Term Link )
  modifying a principal's password ( Index Term Link )
  secret-key decryption ( Index Term Link )
  Secure Shell ( Index Term Link )
  suggestions on choosing ( Index Term Link )
  system logins ( Index Term Link ) ( Index Term Link )
  UNIX and Kerberos ( Index Term Link )
 
 path audit policy, description ( Index Term Link )
 
 path token ( Index Term Link )
 
 path variable, setting ( Index Term Link )
 
 pc audit flag ( Index Term Link )
 
 PERIODIC_SCHEDULE variable (ASET)
  scheduling ASET ( Index Term Link ) ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
 
 permissions
  ACLs and ( Index Term Link ) ( Index Term Link )
  ASET handling of ( Index Term Link ) ( Index Term Link )
  changing file permissions
   absolute mode ( Index Term Link ) ( Index Term Link )
   chmod command ( Index Term Link )
   symbolic mode ( Index Term Link ) ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  defaults ( Index Term Link )
  directory permissions ( Index Term Link )
  file permissions
   absolute mode ( Index Term Link ) ( Index Term Link )
   changing ( Index Term Link ) ( Index Term Link )
   description ( Index Term Link )
   special permissions ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
   symbolic mode ( Index Term Link ) ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  setgid permissions
   absolute mode ( Index Term Link ) ( Index Term Link )
   description ( Index Term Link ) ( Index Term Link )
   symbolic mode ( Index Term Link )
  setuid permissions
   absolute mode ( Index Term Link ) ( Index Term Link )
   description ( Index Term Link )
   finding files with permissions set ( Index Term Link ) ( Index Term Link )
   security risks ( Index Term Link )
   symbolic mode ( Index Term Link )
  special file permissions ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  sticky bit ( Index Term Link )
  tune files (ASET) ( Index Term Link ) ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  umask settings ( Index Term Link )
  user classes and ( Index Term Link )
 
 PermitEmptyPasswords keyword, sshd_config file ( Index Term Link )
 
 PermitRootLogin keyword, sshd_config file ( Index Term Link )
 
 pfcsh command, description ( Index Term Link )
 
 pfexec command, description ( Index Term Link )
 
 pfksh command, description ( Index Term Link )
 
 pfsh command, description ( Index Term Link )
 
 physical security ( Index Term Link )
 
 planning
  PAM ( Index Term Link )
  RBAC ( Index Term Link )
  SEAM
   client and service principal names ( Index Term Link )
   clock synchronization ( Index Term Link )
   configuration decisions ( Index Term Link )
   database propagation ( Index Term Link )
   number of realms ( Index Term Link )
   ports ( Index Term Link )
   realm hierarchy ( Index Term Link )
   realm names ( Index Term Link )
   realms ( Index Term Link )
   slave KDCs ( Index Term Link )
 
 pluggable authentication module
  See PAM
 
 plus (+) audit flag prefix ( Index Term Link ) ( Index Term Link )
 
 plus sign (+), file permissions symbol ( Index Term Link )
 
 policies
  administering ( Index Term Link ) ( Index Term Link )
  and passwords ( Index Term Link )
  auditconfig options ( Index Term Link )
  creating (SEAM ( Index Term Link )
  creating new (SEAM) ( Index Term Link )
  deleting ( Index Term Link )
  modifying ( Index Term Link )
  SEAM Administration Tool panels for ( Index Term Link )
  task map for administering ( Index Term Link )
  viewing attributes ( Index Term Link )
  viewing list of ( Index Term Link )
 
 policy.conf database
  Basic Solaris User rights profile ( Index Term Link )
  description ( Index Term Link ) ( Index Term Link )
  RBAC relationships ( Index Term Link )
 
 port
  for KDC and admin services ( Index Term Link )
  KDC administration daemon ( Index Term Link )
 
 port forwarding
  configuring ssh_config ( Index Term Link )
  Secure Shell ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
 
 Port keyword, sshd_config file ( Index Term Link )
 
 postdatable ticket, definition ( Index Term Link )
 
 postdated ticket, description ( Index Term Link )
 
 postsigterm string, audit_warn script ( Index Term Link )
 
 pound sign (#)
  device_allocate file ( Index Term Link )
  device_maps file ( Index Term Link )
 
 ppp service name, PAM ( Index Term Link )
 
 praudit command
  converting audit records to readable format ( Index Term Link ) ( Index Term Link )
  output formats ( Index Term Link ) ( Index Term Link )
  piping auditreduce output to ( Index Term Link )
  using ( Index Term Link ) ( Index Term Link )
 
 prefixes in audit flags ( Index Term Link ) ( Index Term Link )
 
 preselection mask
  auditconfig command options ( Index Term Link )
  description ( Index Term Link )
  machine-wide ( Index Term Link )
 
 preselection mask (BSM), reducing storage costs ( Index Term Link )
 
 primary, in principals names ( Index Term Link )
 
 Primary Administrator
  rights profile ( Index Term Link ) ( Index Term Link ) ( Index Term Link )
  role ( Index Term Link )
 
 primary audit directory ( Index Term Link )
 
 principal
  adding administration ( Index Term Link )
  adding service principal to keytab ( Index Term Link ) ( Index Term Link )
  administering ( Index Term Link ) ( Index Term Link )
  automating creation of ( Index Term Link )
  creating host ( Index Term Link )
  creating root ( Index Term Link ) ( Index Term Link )
  deleting ( Index Term Link )
  duplicating ( Index Term Link )
  in SEAM ( Index Term Link )
  modifying ( Index Term Link )
  principal name ( Index Term Link )
  removing from keytab file ( Index Term Link )
  removing service principal from keytab ( Index Term Link )
  root ( Index Term Link )
  SEAM Administration Tool panels for ( Index Term Link )
  service principal ( Index Term Link )
  setting up defaults ( Index Term Link )
  task map for administering ( Index Term Link )
  user ID comparison ( Index Term Link )
  user principal ( Index Term Link )
  viewing attributes ( Index Term Link )
  viewing list of ( Index Term Link )
  viewing sublist of principals ( Index Term Link )
 
 principal.db file, description ( Index Term Link )
 
 principal.kadm5 file, description ( Index Term Link )
 
 principal.kadm5.lock file, description ( Index Term Link )
 
 principal.ok file, description ( Index Term Link )
 
 principals, creating ( Index Term Link )
 
 print format field, arbitrary token ( Index Term Link )
 
 Printer Management rights profile
  description ( Index Term Link ) ( Index Term Link )
 
 printing, audit log ( Index Term Link )
 
 privacy
  SEAM and ( Index Term Link )
  security service ( Index Term Link )
 
 private key ( Index Term Link )
  definition in SEAM ( Index Term Link )
  description ( Index Term Link )
  naming convention ( Index Term Link )
 
 privilege ( Index Term Link )
  effects on SEAM Administration Tool ( Index Term Link )
 
 privileged application
  authorization checking ( Index Term Link )
  description ( Index Term Link )
  ID checking ( Index Term Link )
 
 process audit characteristics
  audit ID ( Index Term Link )
  audit session ID ( Index Term Link )
  process preselection mask ( Index Term Link )
  terminal ID ( Index Term Link )
 
 process audit class ( Index Term Link )
 
 process preselection mask
  auditconfig command options ( Index Term Link )
  description ( Index Term Link )
 
 process token, format ( Index Term Link )
 
 processing time costs, BSM and ( Index Term Link )
 
 prof_attr database
  description ( Index Term Link ) ( Index Term Link )
  RBAC relationships ( Index Term Link )
 
 profile
  See rights profile
 
 .profile file, path variable entry ( Index Term Link )
 
 profile shell, description ( Index Term Link )
 
 profiles command, description ( Index Term Link )
 
 program, testing for authorizations ( Index Term Link )
 
 projects module, description ( Index Term Link )
 
 propagation
  KDC database ( Index Term Link )
  Kerberos database ( Index Term Link )
 
 propagation file, adding entries to ( Index Term Link )
 
 Protocol keyword, sshd_config file ( Index Term Link )
 
 proxiable ticket, definition ( Index Term Link )
 
 proxy ticket, definition ( Index Term Link )
 
 ProxyCommand keyword, ssh_config file ( Index Term Link )
 
 pseudo-tty, use in Secure Shell ( Index Term Link )
 
 public directories ( Index Term Link )
 
 public key
  description ( Index Term Link )
  DH authentication and ( Index Term Link )
  known hosts file ( Index Term Link )
  naming convention ( Index Term Link )
  Secure Shell ( Index Term Link )
 
 public-key cryptography
  AUTH_DH client-server session ( Index Term Link ) ( Index Term Link )
  changing public and secret keys ( Index Term Link )
  common key
   calculation ( Index Term Link )
  database of public keys ( Index Term Link )
  generating keys
   conversation key ( Index Term Link )
   public and secret keys ( Index Term Link )
  secret key
   changing ( Index Term Link )
   database ( Index Term Link )
   decrypting ( Index Term Link )
   generating ( Index Term Link )
 
 publickey map, DH authentication and ( Index Term Link )
 
 put subcommand
  sftp command ( Index Term Link ) ( Index Term Link )