Index

• /etc/publickey file
• .netrc
• /usr/lib/security/audit/config

• access control
  • extended permissions
  • lists (1), (2)
• access modes
  • base permissions
• access rights (1), (2)
• adding a CA root digital certificate
• administrative rights
• administrative roles
  • authorization
  • backup
  • maintaining
  • overview
  • passwords
  • shutdown
• audit
  • record processing
  • watch command
• auditing
  • collecting event information
  • configuration of
  • detecting events
  • event selection
  • example, generic audit log scenario
  • example, real-time file monitoring
  • kernel audit trail
  • kernel audit trail mode
  • logging
    • event selection
  • logging events
    • description of
  • overview
  • records format
  • setting up
• authentication
• authorization
  • and hierarchy
  • classes

• backup
  • authorization
  • role
• base permissions

• CAPP/EAL4+ compliant system
• Certificate Authentication Service
  • overview (1), (2)
• Certification Authority (CA)
  • adding root certificate to database
  • deleting root certificate from database
  • list of CAs
  • receiving certificate from
  • requesting certificate from
  • trust settings
• changing key database password
• Common Criteria
• Controlled Access Protection Profile and Evaluation Assurance Level 4+
• creating a key database
• creating IKE tunnels with digital certificates
• credentials
  • DES
  • local

• dacinet
• deleting a CA root digital certificate
• deleting a personal digital certificate
• DES credentials
• digital certificates
  • adding root
  • creating IKE tunnels with
  • creating key database
  • deleting personal
  • deleting root
  • managing
  • receiving
  • requesting
  • trust settings
• disk quota system
  • overview
  • setting up

• EIM
  • see also Enterprise Identity Mapping
• Enterprise Identity Mapping
  • current approach
• extended permissions

• filters
  • relationship to tunnels
  • rules
• filters, setting up
• flush-secldapclntd

• generic data management tunnel
  • using XML

• IKE
  • features
• IKE tunnels
  • creating
    • using digital certificates
• Internet Engineering Task Force (IETF)
• Internet Key Exchange
  • see IKE
• Internet Protocol
  • security
    • features
    • IKE features
    • operating system
• Internet Protocol (IP) security
  • configuration
    • planning
  • installation
  • logging
  • predefined filter rules
  • problem determination
  • reference
• IP
  • see Internet Protocol
• IP security
  • filters
    • and tunnels
  • SAs
  • security associations
  • tunnels
    • and filters
    • and SAs
    • choosing which type
  • tunnels and key management
• IP Security
  • Digital Certificate Support
• IPv4
  • also see Internet Protocol (IP) security
• IPv6

• key database, establishing trust settings for
• key management
  • and tunnels
• Key Manager
• keylogin command
  • secure NFS
• keys
  • changing database passw3ord
  • creating a database

• ldap
  • mksecldap
• LDAP
  • Auditing
    • Security Information Server
  • Client
    • Setting Up
  • Exploitation of the Security Subsystem
  • Security Information Server
    • Setting Up
  • User Management
• LDAP Attribute Mapping
• ldap.cfg file format
• Light Directory Access Protocol (See LDAP)
• local credentials
• logging IP Security
• login user ID (1), (2)
• ls-secldapclntd

• mgrsecurity (1), (2), (3)
• mksecldap
• mount command
  • secure NFS
    • file systems

• network trusted computing base
• NFS (Network File System)
  • /etc/publickey file
  • secure NFS
    • administering
    • authentication
    • authentication requirements
    • Caesar cipher
    • cipher
    • ciphertext
    • configuring
    • cryptanalyze
    • cryptographer
    • decryption
    • DES (Data Encryption Standard)
    • encryption
    • file systems
    • how to export a file system
    • key
    • net name
    • network entities
    • performance
    • plaintext
    • public key cryptography
• NIS+
  • principals
  • security

• OpenSSH
  • using with PAM
• operating system security
  • authentication
  • gates
  • secure RPC password

• PAM
  • adding a module
  • changing the /etc/pam.conf file
  • configuration file
    • /etc/pam.conf
  • debug
  • integrating into AIX
  • introduction
  • library
  • modules
  • using with OpenSSH
• passwords
  • authorization to change (1), (2), (3), (4)
  • extending restrictions
  • secure RPC
• permissions
  • base
  • extended
• PKI
• principals
  • security
• public key cryptography
  • secure NFS
• Public Key Infrastructure

• restart-secldapclntd
• restore
  • authorization
  • role
• role
  • authorization
  • backup
  • maintaining
  • overview
  • passwords
  • shutdown
• root user processes
  • capabilities of

• SAK
• secldapclntd
• sectoldif command
• secure attention key
  • configuring
• secure NFS
• secure RPC password
• security
  • Internet Protocol (IP)
  • introduction
    • administrative tasks (1), (2)
    • authentication
    • identification
  • NIS+
    • administrative rights
    • authentication
    • authorization (1), (2)
    • credentials
    • levels
    • principals
  • operating system
  • root account
  • TCP/IP
• security associations (SA)
  • relationship to tunnels
• Security Parameters Index (SPI)
  • and security associations
• Server
  • Security Information
    • LDAP
• setgid program
  • use of
• setuid program
  • use of
• shutdown
  • authorization
• start-secldapclntd
• stop-secldapclntd

• TCB
• tcbck command
  • configuring
  • using
• TCP/IP
  • /etc/ftpusers
  • /etc/hosts.equiv
  • .netrc
  • /usr/lib/security/audit/config
  • IP security
    • IKE features
    • installation
    • planning configuration
    • predefined filter rules
    • problem determination
    • reference
  • IP Security
  • security
    • data
    • DOD
    • NTCB (1), (2)
    • operating system-specific (1), (2), (3)
    • remote command execution access (1), (2), (3), (4)
    • restricted FTP users (1), (2), (3), (4)
    • SAK
    • TCP/IP-specific (1), (2), (3), (4), (5), (6)
    • trusted shell
  • see Internet Protocol
• trust settings for key database, establishing
• Trusted Communication Path
  • use of
• Trusted Computing Base
  • auditing of
  • auditing the security state of
  • checking with tcbck command
  • file system
    • checking
  • overview
  • trusted files
    • checking
  • trusted program
• tunnels
  • and key management
  • choosing which type
  • relationship to filters
  • relationship to SAs

• user (1), (2)
  • adding (1), (2)
• user account
  • control of
• User Management
  • LDAP

• Virtual Private Network (VPN)
• VPN
  • benefits