Trusted Solaris Operating System - Technical FAQs

Question

Why can't I log in as root after installing Trusted Solaris? I was able to log in as install, but I couldn't do anything.

Answer

Disallowing root logins is not a bug. It's a feature! In the Trusted Solaris environment, the all-powerful superuser is replaced by multiple administrative roles. No one can log in or su to root. Administrators first log in as ordinary users before assuming the appropriate role for the task at hand. An administrative role called root exists, but only for installing software that requires a real UID of root.

After installation, a user called "install" logs in and assumes the root role to configure the system. This page points you to the knowledge you need to successfully configure a Trusted Solaris system.

Because you tried to log in as root, it's a good bet that you know how to administer Solaris systems. Solaris system administration experience, while necessary, is not enough. The Trusted Solaris operating environment has its own unique requirements, files, tools, and administrative procedures.

Successful configuration of a Trusted Solaris system requires:

• Understanding of Trusted Solaris security features and of the restrictions enforced by the system
• Knowledge of Trusted Solaris system administration concepts
• Advance planning, including the development of a site security policy and a plan for setting up user and administrative accounts and hosts to reflect your site's security requirements

Related Documentation

Because of major differences between Solaris and Trusted Solaris, to successfully configure a secure environment you need to read and carefully follow the procedures described in the Trusted Solaris Installation and Configuration manual. The Trusted Solaris Installation and Configuration manual describes how to plan and provides procedures for setting up the system.

You also need the knowledge contained in at least the following manuals.

• Trusted Solaris User's Guide
  Tells how to work within the security controls of the system
• Trusted Solaris Administrator's Procedures
  Describes the tools used by administrative roles, gives guidance, and provides procedures needed for managing user and role accounts, hosts, network communications
• Trusted Solaris Label Administration
  Provides prerequisite information for administering labels, which are basic features of mandatory access control, and describes how to create your site's mandatory label_encodings (4TSOL) file
• Trusted Solaris Audit Administration
  Provides prerequisite information for optional auditing of user activities

The documents listed above and other Trusted Solaris manuals are available, see our Documentation FAQs.

Training

Visit the Sun Educational Services search page. Search for keyword "Trusted" in your geographical area. Or call:

1 (800) 422-8020
1 (303) 464-4097 outside of the US

Applies to Trusted Solaris Release

1.2, 2.5, 2.5.1, 7, 8