s_install

Purpose

     Contains security-relevant installation information.

Description

     The /etc/security/s_install  and /etc/security/s_installx
     file  are table  files  (see "tbl")  that hold  security-
     relevant installation information for trusted files.  The
     /etc/security/s_install file  holds installation informa-
     tion  for trusted  files in  the base  AIX system,  while
     /etc/security/s_installx  holds installation  information
     for trusted files  in the extended AIX  system.  Both the
     scheck  command,  which  checks integrity  assertions  on
     security data,  and sinstall,  which installs  files, are
     table-driven  commands that  rely on  installation tables
     s_install  and s_installx.   Only a  user with  superuser
     authority can edit an installation table.

     Each entry in s_install (or s_installx) has the following
     format, with colons as field separators:

          key:pathname:owner:group:mode:reserved1:reserved2:reserved3:links

     where:

     key         Contains  a  key  to uniquely  identify  this
                 entry.  Duplicate keys are not allowed.

     pathname    Contains  the absolute  pathname  of a  file.
                 Duplicate pathnames are not allowed.

     owner       Specifies the file's owner.

     group       Specifies the file's group.

     mode        Specifies the file mode.

     reserved1   Indicates a reserved field (ACL).

     reserved2   Indicates a reserved field (MAC level).

     reserved3   Indicates a reserved field (privileges).

     links       Contains  the  absolute pathnames  of  links,
                 separated by blanks.

Examples

     Below are some example s_install entries.

       passwdf:/etc/passwd:root:system:0644::::
       passwd:/bin/passwd:root:bin:4555::::
       s_install:/etc/security/s_install:root:system:0644::::

Files

     /etc/security/s_install
     /etc/security/s_installx

Related Information

     The  scheck and  sinstall commands  in the  AIX Operating
     System Commands Reference.