HP-UX Profiles

Startup

1. If a startup file (apart from /etc/rc) should be used, it should be placed in /etc/inittab like:

   rlcl::bootwait:/etc/rc.local >/dev/console 2>&1 # 4-char ID ! should be placed before ...
   vue :34:respawn:/etc/vuerc                      # ... VUE validation and invocation (9.x)
   

   Note that /etc/rc.local should exist and must have execute permissions:

   touch     /etc/rc.local
   chmod g+x /etc/rc.local
   chmod u+x /etc/rc.local
   

2. Check ssh settings, if applicable.
3. If "unsecure" services like rsh, ftp, et al, are to be enabled, use at least tcp_wrappers, in /etc/inetd.conf:

   ftp     stream  tcp6    nowait  root    /opt/bin/tcpd       ftpd -l -u077
   shell   stream  tcp6    nowait  root    /opt/bin/tcpd       rshd
   telnet  stream  tcp6    nowait  root    /opt/bin/tcpd       telnetd -a
   login   stream  tcp6    nowait  root    /opt/bin/tcpd 
   

   where /opt/bin/tcpd is the actual TCP wrapper. In this case, root access from some machines may be allowed via /.rhosts: The general format is

   <machine>.<domain> root
   <machine>          root
   

   This list should be restricted to an absolute minimum, for admin purposes only.

Profiles

• /opt/bin/.kshrc for ksh customization, example.
• /etc/profile will be executed during ksh login and, if there's a chance to be called from a GUI environment, should contain

  if [ ! "$DT" -a ! "$VUE" ]; then 
  ...                             # group terminal stuff (stty,tset,..) here,
  fi
  

  
  and
  

  if [ -x /opt/bin/.profile ]
  then
    . /opt/bin/.profile
  fi
  umask 022                       # u=rwx,g=r,o=r
  

  to allow for system wide definitions at login time.
• /opt/bin/.profile contains local machine specific definitions, e.g. PATH, LIBPATH, MANPATH, ENV, which are set for all ksh users at login time.
• Note that all stuff in /opt/bin/ must be world-readable and -executable.
• /etc/d.profile (the default user profile) and /.profile's should contain

                  # HP-UX 10.x/11.0
  # VUE,CDE: execute profile
  if [   "$DT" -o "$VUE" ]; then
     . /etc/profile
  else   
     ... stty/tset stuff
  fi
   
                  # HP-UX 11.11
  ???                
  

  to allow ksh login via desktop and non-desktop access.
• On HP-UX 9.x root's default shell may be changed to /bin/ksh/.