Install TCB after BOS installation

[mrn]

AIX 5.3 - 570

Anyone know howto install TCB after the initial BOS has already been done, I tried to boot from DVD and do a preservation install, but don't get the option... Ideas?

Mike

"Whenever I dwell for any length of time on my own shortcomings, they gradually begin to seem mild, harmless, rather engaging little things, not at all like the staring defects in other people's characters."

 

[RMGBELGIUM]

Nope, clean install is the only time you are able to install tcb unfortunately ... We tried the same thing, had the same problems as you did.Resulted in reinstall from scratch.

rgds,

R.

 

[mrn]

Nuts

Mike

"Whenever I dwell for any length of time on my own shortcomings, they gradually begin to seem mild, harmless, rather engaging little things, not at all like the staring defects in other people's characters."

 

[mrn]

Ok I cheated

odmget -q "attribute='TCB_STATE'" PdAt > /tmp/tcb.txt
sed "s/tcb_disabled/tcb_enabled/g" /tmp/tcb.txt > /tmp/tcb2.txt
odmchange -o PdAt -q "attribute='TCB_STATE'" /tmp/tcb2.txt

Mike

"Whenever I dwell for any length of time on my own shortcomings, they gradually begin to seem mild, harmless, rather engaging little things, not at all like the staring defects in other people's characters."

 

[DukeSSD]

I wonder how stable that install will prove to be, I hope that was on a dev / test box ;0)

 

[kHz]

That still won't do. For TCB it has to be at installation.

 

[plamb]

TCB will modify perms and owership\group during install

 

[mrn]

So far so good

#!/bin/sh
for file in $( grep "^/" /etc/security/sysck.cfg 2>/dev/null | sed 's/://' )
do
if [[ ! -f $file ]] ; then
tcbck -d $file
elif [[ -d $file || -c $file || -b $file || -L $file ]] ; then
tcbck -a $file owner group type mode
else
tcbck -a $file owner group type mode size checksum
fi
done

Mike

"Whenever I dwell for any length of time on my own shortcomings, they gradually begin to seem mild, harmless, rather engaging little things, not at all like the staring defects in other people's characters."

 

[khalidaaa]

I don't beleive you did this Mike

I would agree with the rest that it might not be stable coz i've never tried it but it is becoming tempting

Regards,
Khalid

 

[kHz]

You THINK it is okay.

{I have seen the hack you did on the Internet in a news group or somewhere before. It doesn't mean it works correctly.}

Did you know the TCB software consists of the kernel, among others?

Did you also know the trusted communication path is ONLY added at installation time with TCB selected?

Which also means your trusted command interpreter (tsh) will not work.

 

[cspilman]

kHz is right.

What you CAN do, though, is do a preservation install and then enable TCB.

Regards,
Chuck

 

[cspilman]

nevermind... didn't read the original post about not having that option. :~/

Regards,
Chuck