ASET Environment Variables (System Administration Guide: Security Services)

System Administration Guide: Security Services

ASET Environment Variables

The following table lists the ASET environment variables and the values that they specify.

Table 20–2 ASET Environment Variables and Their Meanings


Environment Variable	Value Specified
`ASETDIR`	ASET working directory
`ASETSECLEVEL`	Security level
`PERIODIC_SCHEDULE`	Periodic schedule
`TASKS`	Tasks to run
`UID_ALIASES`	Aliases file
`YPCHECK`	Whether to extend checks to NIS maps and NIS+ tables
`CKLISTPATH_LOW`	Directory lists for low security
`CKLISTPATH_MED`	Directory list for medium security
`CKLISTPATH_HIGH`	Directory list for high security

The environment variables that are listed in the following sections are found in the /usr/aset/asetenv file. The ASETDIR and ASETSECLEVEL variables are optional and can be set only through the shell by using the aset command. The other environment variables can be set by editing the file.

`ASETDIR` Environment Variable

ASETDIR specifies an ASET working directory.

From the C shell, type:

% setenv ASETDIR pathname

From the Bourne shell or the Korn shell, type:

$ ASETDIR=pathname
$ export ASETDIR

Set pathname to the full path name of the ASET working directory.

`ASETSECLEVEL` Environment Variable

The ASETSECLEVEL variable specifies a security level at which ASET tasks are executed.

From the C shell, type:

% setenv ASETSECLEVEL  level

From the Bourne shell or the Korn shell, type:

$ ASETSECLEVEL=level 
export ASETSECLEVEL

In these commands, level can be set to one of the following:

`low`	Low security level
`med`	Medium security level
`high`	High security level

`PERIODIC_SCHEDULE` Environment Variable

The value of PERIODIC_SCHEDULE follows the same format as the crontab file. Specify the variable value as a string of five fields enclosed in double quotation marks, with each field separated by a space:

"minutes hours day-of-month month day-of-week"

Table 20–3 Periodic_Schedule Variable Values


Variable	Value
`minutes hours`	Specifies start time in number of minutes (0–59) after the hour and the hour (0–23)
`day-of-month`	Specifies the day of the month when ASET should be run, with values from 1–31
`month`	Specifies the month of the year when ASET should be run, with values from 1–12
`day-of-week`	Specifies the day of the week when ASET should be run, with values from 0–6; Sunday is day 0

The following rules apply:

You can specify a list of values, each delimited by a comma, for any field.
You can specify a value as a number, or you can specify it as a range; that is, a pair of numbers that are joined by a hyphen. A range states that the ASET tasks should be executed for every time that is included in the range.
You can specify an asterisk (*) as the value of any field. An asterisk inclusively specifies all possible values of the field.

The default entry for the PERIODIC_SCHEDULE variable causes ASET to execute at 12:00 midnight every day:

PERIODIC_SCHEDULE=”0 0 * * *”

`TASKS` Environment Variable

The TASKS variable lists the tasks that ASET performs. The default is to list all seven tasks:

TASKS=”env sysconfig usrgrp tune cklist eeprom firewall”

`UID_ALIASES` Environment Variable

The UID_ALIASES variable specifies an aliases file. If present, ASET consults this file for a list of permitted multiple aliases. The format is UID_ALIASES=pathname, where pathname is the full path name of the aliases file.

The default is as follows:

UID_ALIASES=${ASETDIR}/masters/uid_aliases

`YPCHECK` Environment Variable

The YPCHECK variable extends the task of checking system tables to include NIS or NIS+ tables. This variable is a Boolean variable, which can be set to either true or false.

The default is false, which confines the checking to local system tables:

YPCHECK=false

`CKLISTPATH_level` Environment Variable

The three checklist path variables list the directories to be checked by the system files checks task. The following definitions of the variables are set by default. They illustrate the relationship between the variables at different levels:

CKLISTPATH_LOW=${ASETDIR}/tasks:${ASETDIR}/util:${ASETDIR}/masters:
/etc
CKLISTPATH_MED=${CKLISTPATH_LOW}:/usr/bin:/usr/ucb
CKLISTPATH_HIGH=${CKLISTPATH_MED}:/usr/lib:/sbin:/usr/sbin:/usr/ucblib

The values for the checklist path environment variables are similar to those values of the shell path variables, in that they are lists of directory names that are separated by colons. You use an equal sign (=) to connect the variable name to its value.