test

Trusted Solaris 7 Roadmap

Trusted Solaris 7 Roadmap

This purpose of this document is to help you get started understanding and installing the Trusted SolarisTM operating environment. It provides:

Trusted Solaris 7 Materials

The Trusted Solaris 7 package includes the following materials:

Documentation Overview

Since the Trusted Solaris 7 operating environment is based on the Solaris 7 operating environment, you should have access to the complete Solaris 7 documentation set in addition to the Trusted Solaris 7 documentation. The Trusted Solaris documentation set focuses on the those aspects of the environment that are different from Solaris 7. The manuals are available in both printed and online versions.

Trusted Solaris 7 Documentation Set

The Trusted Solaris documentation set consists of:

Trusted Solaris 7 Printed Documentation

Four printed Trusted Solaris 7 documents are shipped with the software: Trusted Solaris 7 Release Notes, Trusted Solaris Installation and Configuration, Trusted Solaris 7 Installation and Configuration on the Sun Enterprise 10000 (SPARC only), and this guide, Trusted Solaris 7 Roadmap. The complete printed documentation set (Part Number TS799-007-99D9) can be ordered separately. Since Trusted Solaris is based on the Solaris operating environment, Trusted Solaris customers who rely on Trusted Solaris printed manuals are expected to have access to the Solaris printed manuals as well. The Trusted Solaris and Solaris document sets can be ordered from http://www1.fatbrain.com/documentation/sun.

The printed documentation is available for the three locales, as described below:

Online Documentation and Man Pages

All Trusted Solaris manuals described in the Trusted Solaris 7 Release Notes are available online from the Trusted Solaris 7 AnswerBook CD-ROM (704-8121-10) and at the Sun website: http://www.sun.com/docs and can be printed from these sources if desired.

In addition to the online documentation, online help is provided in the Trusted Solaris operating environment through the Front Panel help icon, help menus, and help buttons.

An extensive library of man pages is available for the Trusted Solaris 7 operating environment. These are available in the Trusted Solaris 7 Reference Manual mentioned above and from the command line using the man(1) command.

Note -

If a man page is in both the base Solaris (or CDE) and the Trusted Solaris reference manuals, refer to the man page in the Trusted Solaris 7 Reference Manual because it includes the differences unique to the Trusted Solaris operating environment.

For an overview of the system and a complete listing of commands available in the Trusted Solaris 7 operating environment, see the following introductory man pages for each section of the reference manual:

Accessing Trusted Solaris Man Pages

The man pages for the Trusted Solaris environment reside in three different directories. For the man command to find all the Trusted Solaris man pages, the MANPATH should display the three paths in the following list, along with any other paths where man pages are installed at your site.

The MANPATH variable can be set individually by users in their shell initialization files or globally by administrators in site-wide shell initialization files in /etc/skel (or alternate skeleton directory) to be copied into the home directories for all users. To set the MANPATH variable, enter:


trusted% setenv MANPATH="/usr/dt/man:/usr/openwin/man:/usr/man:$MANPATH"

To check a system's current MANPATH setting, enter:


echo $MANPATH

This should display the three paths mentioned above and any other paths to man pages at your site.

Specifying Man Pages by Section Number

To check whether different versions of a topic exist in different sections, enter man with the -l option:


trusted% man -l topic

To specify man pages by section, use the man with the -s option:


trusted % man -s sectionnumber topic

The following example shows the results of using the -l option to find all the Intro man pages.


trusted% man -l Intro
Intro (1)   -M /usr/man
Intro (1m)  -M /usr/man
Intro (2)   -M /usr/man
Intro (3)   -M /usr/man
Intro (9f)  -M /usr/man
Intro (9s)  -M /usr/man
Intro (9e)  -M /usr/man
Intro (9)   -M /usr/man
Intro (4)   -M /usr/man
Intro (5)   -M /usr/man
Intro (7)   -M /usr/man
Intro (6)   -M /usr/man

By default, if you enter man topic in the Trusted Solaris environment without specifying the section and there are multiple sections containing man pages with the same name, the man page for the lowest numbered section displays, for example:


trusted% man Intro 
User Commands                             Intro(1)
NAME
     Intro, intro - Introduction to commands and application pro-
     grams

DESCRIPTION
  ...

The following example illustrates specifying a section number:


trusted% man -s7 intro
Device and Network Interfaces                            Intro(7)

NAME
     Intro, intro - Introduction to special files

DESCRIPTION
      ...

Installing the Trusted Solaris Operating Environment

Installation and configuration of the Trusted Solaris environment involves more than loading executable files, entering your site's data, and setting configuration variables; it requires considerable background for making decisions related to your site's security policies. Trusted Solaris provides a unique environment based on the following concepts:

To familiarize yourself with the Trusted Solaris environment, you should at a minimum read the Trusted Solaris User's Guide and the Trusted Solaris Administration Overview. You should also be familiar with the rest of the documentation set, which is described in the "Trusted Solaris 7 Documentation Set". It is highly recommended that you attend a "Trusted Solaris for System Administrators" course, available from Sun Educational Services at http://suned.sun.com/catalog/index.html. Ask your Sun account representative to help you schedule it.

Before installing, you should read the Trusted Solaris Installation and Configuration manual thoroughly so that you can devise an installation strategy. Other useful information for the installation process is contained Solaris 7 Installation Collection. The manual, Solaris 7 8/99 Sun Hardware Platform Guide, contains important information in the following chapters:

Note -

Do not use "Alternate Pathing 2.2 on the Sun Enterprise 10000 Server" and "Solaris 7 8/99 on the Sun Enterprise 10000 Server". Instead follow the instructions in Trusted Solaris 7 Installation and Configuration on the Sun Enterprise 10000.

Although there are a lot of similarities between installing the Trusted Solaris 7 and Solaris 7 operating environments there are major differences as well, such as:

The additional procedures required for a trusted system are provided in the Trusted Solaris Installation and Configuration with pointers to other relevant documentation.

Installing and Using the Online Documentation Viewer

This section contains the following topics:

Viewing AnswerBook2 Documents

AnswerBook2 is an online documentation system from Sun Microsystems, Inc. It consists of SGML source documentation and AnswerBook2 server software. The documents can be viewed using any web browser that supports HTML 3.2, by entering the name of the server host, followed by a colon (:) and the port number. For example, to access documentation displayed on a remote documentation server at the default port, enter http://doc_server_name:8888.

For a complete description of AnswerBook2 features, see "Introduction to the AnswerBook2 Product" in Solaris 7 (SPARC Platform Edition) Installation Library or "Introduction to the AnswerBook2 Product" in Solaris 7 (Intel Platform Edition) Installation Library. For information on viewing documentation using AnswerBook2, see "Getting Started" in Solaris 7 (SPARC Platform Edition) Installation Library or "Getting Started" in Solaris 7 (Intel Platform Edition) Installation Library.

AnswerBook2 server software can be installed in either the Solaris or Trusted Solaris operating environment. If the server host is running the Solaris 7 operating environment, use the version of the AnswerBook2 server software provided on the Solaris 7 Documentation CD and follow the instructions in "Installing Documentation Server Software" in Solaris 7 (SPARC Platform Edition) Installation Library or "Installing Documentation Server Software" in Solaris 7 (Intel Platform Edition) Installation Library.

Note -

You cannot install the AnswerBook packages using WebStart. You cannot run the AnswerBook server or the AnswerBook2 server from the CD.

If the server host is running in the Trusted Solaris 7 operating environment, install the AnswerBook2 server software from the Trusted Solaris Documentation CD and follow the instructions in the next section.Missing Cross Reference Target.

To install the Trusted Solaris AnswerBook2 documentation server, you must be running the Trusted Solaris 7 operating environment on either a SPARCstation 2 or higher (minimum SPARCstation 5 recommended) or an Intel-based personal computer. You need approximately 30 Megabytes of hard disk space available for the server software plus approximately 55 megabytes for the Trusted Solaris-related collections, and up to 600 megabytes for all available collections.

To Install the AnswerBook2 Server Software

Caution - Caution -

In the Trusted Solaris environment, install the AnswerBook2 server software only from the Trusted Solaris Documentation CD. Do not install the server software from the Solaris Documentation CD in the Trusted Solaris environment or install the server software from the Trusted Solaris Documentation CD in the Solaris environment. This procedure describes how to install the AnswerBook2 server in the Trusted Solaris environment. For installing the server software from the Solaris Documentation CD in the Solaris environment, see "Accessing Online Documentation" in Solaris 7 (SPARC Platform Edition) Installation Library

  1. Assume the administrator role and go to an ADMIN_LOW workspace.

    See "Assuming a Role and Working in a Role Workspace" in Trusted Solaris Administrator's Procedures, if needed.

  2. Allocate the CD-ROM device.

    See "Device Management Procedures" in Trusted Solaris Administrator's Procedures for how to allocate the device, if needed.

    1. Move the device to the Allocated Devices list.

    2. Insert the Trusted Solaris 7 Documentation CD into the CD-ROM device.

    3. Press RETURN when prompted.


      Press RETURN when cdrom_0 is ready, or ^C to cancel.

    4. Enter y to mount the CD-ROM, when prompted.


      Do you want cdrom_0 mounted (y/n)?  y

    5. Enter RETURN to close the Device Allocation window.


      Press RETURN to quit window.

  3. In a profile shell, change to the directory where the documentation server packages are located.

    Use the following path, replacing architecture with i386 (for Intel) or sparc, to specify the architecture of the current host.


    $ cd /cdrom/admin/trusted_sol_7_doc/Trusted_Solaris_7_Doc/architecture/Product

    For example, the following command changes to the directory for the server software packages for a SPARC AnswerBook server:


    $ cd /cdrom/admin/trusted_sol_7_doc/Trusted_Solaris_7_Doc/sparc/Product

  4. Run pkgadd(1M) and select the three server software packages.


    $ pkgadd -d .

    Select these server software packages:

    • SUNWab2r (0.3 Megabytes) - Installs in root partition and provides configuration and start-up files.

    • SUNWab2s (1.00 Megabytes) - Provides shared files for performing document processing.

    • SUNWab2u (26.00 Megabytes) - Provides executable and back-end processing files for server and administration functions.

    Note -

    During installation, an entry for the answerbook2 profile is automatically made in the local host's /etc/security/tsol/tsolprof file. If using NIS+ for administering users and roles, do Step 5 to make the answerbook2 profile available via NIS+ for assignment to the administrator role.

  5. If using NIS+, add the answerbook2 profile to the NIS+ tsolprof table, if desired.

    1. Assume the security administrator role.

    2. Run the grep(1) command to find the answerbook2 profile entry in the local file, and pipe the entry to the nisaddent(1M) command to install the entry in the NIS+ tsolprof table, as shown in the following example.


      $ grep answerbook2 /etc/security/tsol/tsolprof | nisaddent tsolprof

  6. To allow manual startup or shutdowns of the AnswerBook2 server, add the AnswerBook2 profile to the administrator role, if desired.

    See procedures in "Setting Up or Modifying a User or Role Account" in Trusted Solaris Administrator's Procedures, if needed for more details about how to access the User Manager and add a profile to an account.

    Note -

    The answerbook2 profile must already have been installed as decribed in Step 5 into the local tsolprof file.

    1. Assume the security administrator role and go to an ADMIN_LOW workspace.

    2. Bring up the User Manager and choose a naming service.

      If NIS+ is being used to administer users, choose NIS+ to store the profile assignment in the tsoluserNIS+ table. In a NIS+ domain, admin is defined only in the tsolprof NIS+ table. Choosing None stores the answerbook2 profile assignment in the local tsoluser file.

    3. Double-click on the name of the admin role.

    4. On the User Manager Navigator, click the Profiles button to bring up the profiles dialog box.

    5. Move the answerbook2 profile to the Selected List and click OK.

    6. When the dialog box closes, click the Done button to close the Navigator, and choose Close from the File menu to close the User Manager.

  7. Stop and restart the AnswerBook2 server, either by using ab2mgr or rebooting.

    If the security administrator role added the answerbook2 profile to the administrator role, as described in Step 6 (the previous step), user the /etc/init.d/ab2mgr command to stop and restart the server. Otherwise, reboot to start the server.


    $ reboot
/* OR */
$ /etc/init.d/ab2mgr stop
$ /etc/init.d/ab2mgr start

  8. Install the document collections.

    See "To Install AnswerBook2 Document Collections".

To Install AnswerBook2 Document Collections

You can install collections from the Trusted Solaris 7 Documentation CD, the Solaris 7 Documentation CD, or from other locations. You can install Trusted Solaris collections in either the Trusted Solaris or Solaris environment, and you can also install Solaris collections in the Trusted Solaris environment. This section describes how to install collections on a Trusted Solaris host. For installing the server software from the Solaris Documentation CD in the Solaris environment, see "Accessing Online Documentation" in Solaris 7 (SPARC Platform Edition) Installation Library

The collections do not need to be installed on the same host that is running the document server software. Step 10 tells how to identify collections to the server when they are located on another host.

  1. Assume the administrator role and go to an ADMIN_LOW workspace.

    See "Assuming a Role and Working in a Role Workspace" in Trusted Solaris Administrator's Procedures, if needed.

  2. If installing from a documentation CD, insert the CD into the CD-ROM device and allocate the device.

    See "Device Management Procedures" in Trusted Solaris Administrator's Procedures for how to allocate the device, if needed.

    1. Move the device to the Allocated Devices list.

    2. Insert the Trusted Solaris 7 Documentation CD into the CD-ROM device.

    3. Press RETURN when prompted.


      Press RETURN when cdrom_0 is ready, or ^C to cancel.

    4. Enter y to mount the CD-ROM, when prompted.


      Do you want cdrom_0 mounted (y/n)?  y

    5. Enter RETURN to close the Device Allocation window.


      Press RETURN to quit window.

  3. Change to the directory where the document packages are located.

    If you are installing from the Trusted Solaris documentation CD, use the following path.


    $ cd /cdrom/admin/trusted_sol7_doc/Trusted_Solaris_7_Doc/common/Product

  4. Use the pkgadd(1M) installation utility and select document collection packages to install. 


    $ pkgadd -d .

    For a detailed list of document collections included on the Trusted Solaris 7 Documentation CD, see the README_en.html or README_en.txt file located on the CD.

  5. If installing from the Trusted Solaris Documentation CD, select from the collections shown in the following table. For the contents of the collections see Missing Cross Reference Target (SUNWtab), Missing Cross Reference Target (SUNWtaman), Missing Cross Reference Target (SUNWadac), and Missing Cross Reference Target (SUNWabhdw).

     Collection Name Package Name Size in Megabytes

    Trusted Solaris AnswerBook  

    SUNWtab 

    14.8 

    Trusted Solaris Reference Manual AnswerBook 

    SUNWtaman 

    149 

    Solstice AdminSuite 2.3 AnswerBook 

    SUNWadac 

    3.7 

    Solaris 7 8/99 AnswerBook 

    SUNWabhdw 

    9.6 

  6. Stop and restart the AnswerBook2 server software, either by using ab2mgr or rebooting.

    If the security administrator role added the answerbook2 profile to the administrator role, as described in Step 6, enter the /etc/init.d/ab2mgr start command to stop and start the server. Otherwise, reboot to restart the server.


    $ reboot
/* OR */
$ /etc/init.d/ab2mgr stop
$ /etc/init.d/ab2mgr start

  7. Make sure all collections are available.

    Launch any web browser and enter the name of the host running the server software. If the server is local, enter: http://localhost:8888 in the address field.

    For example, on the Netscape browser, you would enter http://localhost:8888 in the Location field. 


    Location: http://localhost:8888

    All the collections you have installed should display in the browser window.

  8. If installing document collections from another location than the Trusted Solaris Documentation CD, use the following command if the collections are not automatically added to the server's database.


    $ /usr/lib/ab2/bin/ab2admin -o add_coll -d path_to_collection

    Replace path_to_collection with the full path to the location of the collinfo file (for AnswerBook2 collections) or the ab_cardcatalog file (for AnswerBook1 collections).

  9. If the server does not find any collection packages that may be already installed, use the ab2admin -o scan command to locate the collections and have them added to the server's document database.

    This function only works for locally installed packages. 


    $ /usr/lib/ab2/bin/ab2admin -o scan

  10. To serve document collections located on another host, use the ab2admin -o add_coll command and provide the full path name to the ab_cardcatalog or collinfo file.

    For example, if you want the document server to serve document collections located on a host, use the following command, substituting the host's name for hostname: 


    $ ab2admin -o add_coll -d /net/hostname/books/SUNWdtad/collinfo
    Note -

    For the example to work, the other host would need to share the directory with the current host (see share(1M), and the automountd(1M)would need to be running.

To Stop and Restart the Server

Note -

This procedure only works if the security administrator role added the answerbook2 profile to the administrator role, as described in Step 6.

  1. Assume the administrator role and go to an ADMIN_LOW workspace.

    See "Assuming a Role and Working in a Role Workspace" in Trusted Solaris Administrator's Procedures, if needed.

  2. Use the /etc/init.d/ab2mgr stop command to stop and start the server.


    $ /etc/init.d/ab2mgr stop
$ /etc/init.d/ab2mgr start

CD Contents

The Trusted Solaris 7 Documentation CD includes the following directories:

The following tables show the contents of the AnswerBook collections included on the Trusted Solaris Documentation CD.

Table 1-1 Trusted Solaris (User, Developer, and Administrator) AnswerBook Collection

Package Name/Size in Megabytes 

(Part Number) Manual Title 

SUNWtab/14.8 

(805-8050) Trusted Solaris 7 Release Notes 

(805-8051) Trusted Solaris 7 Roadmap  

(805-8053) Trusted Solaris User's Guide  

(805-8054) Trusted Solaris Administration Overview  

(805-8055) Trusted Solaris Administrator's Procedures  

(805-8056) Trusted Solaris Installation and Configuration  

(805-8057) Trusted Solaris Audit Administration  

(805-8058) Trusted Solaris Label Administration  

(805-8059) Trusted Solaris 7 Transition Guide  

(805-8060) Trusted Solaris Developer's Guide  

(805-8062) Compartmented Mode Workstation Labeling: Encodings Format  

(805-8110) Trusted Solaris 7 Installation and Configuration on the Sun Enterprise 10000 

Table 1-2 Trusted Solaris Reference Manual AnswerBook Collection

Package Name/Size in Megabytes 

(Part Number) Manual Title 

SUNWtaman/14.9 

(805-8066) Man Pages (1), (1B): User Commands 

(805-8067) Man Pages (1M): Maintenance and Administration Commands 

(805-8068) Man Pages (2): System Calls 

(805-8069) Man Pages (3), (3C), (3K), (3N), (3R), (3X), (3X11TSOL): Library Functions  

(805-8070) Man Pages (4): File Formats  

(805-8071) Man Pages (5): Macros  

805-8072) Man Pages (7), (7D), (7M): Device and Network Interfaces 

(805-8073) Man Pages (9): Device Driver Interfaces 

(805-8074) Man Pages (9F): Kernel Functions for Device Drivers 

Table 1-3 Solstice AdminSuite 2.3 & AutoClient 2.1 AnswerBook Collection

Package Name/Size in Megabytes 

(Part Number) Manual Title 

SUNWadac/3.7 

(805-3026) Solstice AdminSuite 2.3 Administration Guide 

(805-8066) Man Pages (1), (1B): User Commands 

(805-3027) Solstice AdminSuite 2.3 Installation and Release Notes  

(805-3165) Solstice AdminSuite Print Administration Guide  

(805-3166) Solstice AdminSuite Domain-Based License Installation Notes 

(805-3167) Solstice AutoClient 2.1 Administration Guide 

(805-3168) Solstice AutoClient 2.1 Installation and Release Notes 

Table 1-4 Solaris 7 8/99 on Sun Hardware AnswerBook Collection

Package Name/Size in Megabytes 

(Part Number) Manual Title 

SUNWabhdw/9.55 

(805-4448) NFS Server Performance and Tuning Guide for Sun Hardware 

(805-4449) Platform Notes: The hme Fast Ethernet Device Driver 

(805-4450) Platform Notes: SPARCstation 10SX and SPARCstation 20 System Configuration Guide  

(805-4451) Platform Notes: Using luxadm Software  

(805-4452) Platform Notes: Ultra 450 Workstation and Ultra Enterprise 450 Server 

(805-4453) Platform Notes: Sun Enterprise 250 Server 

(805-4454) Platform Notes: Sun Enterprise 6x00/5x00/4x00/3x00 Systems 

(805-5232) Platform Notes: The Sun Quad FastEthernet Device Driver 

(805-5233) Platform Notes: SPARCstation Voyager Software Guide 

(805-5985-10) Sun Enterprise Server Alternate Pathing User's Guide 

(805-5986-10) Sun Enterprise Server Alternate Pathing Reference Manual 

(805-6783) Platform Notes: SunFDDI Adapter  

(805-7397-10) Sun Remote System Control (RSC) Installation Guide 

(805-7398-10) Sun Remote System Control (RSC) User's Guide 

(805-7404-10) Solaris Handbook for Sun Peripherals 

(805-7410-10) PCI:SBus Comparison 

(805-7945-10) Platform Notes: The Sun GigabitEthernet Device Driver