Originally posted by: SystemAdmin

Hi, there's only a smiple conceptual discription about TCB on redbook <Certification Study Guide - pSeries AIX System Administration>, as quoted below:

[i]The Trusted Computing Base provides an extra level of security and ensures that whatever you are trying to run is actually run. If you set this attribute to YES, the install process installs the bos.rte.security fileset and you can configure TCB. It is important to note that you can enable TCB only at this time. If you decide not to install TCB now, you will have to reinstall the operating system to enable TCB at a later stage. TCB can be removed by removing the bos.rte.security fileset from the system.[/i]

However I don't know:

1. why do I need TCB?
2. How can I configure TCB for what purpose?
3. Why TCB can only be initiated during the installation procedure?

Any clues? Thanks in advance.
#AIX-Forum

Originally posted by: orphy

1. Because you might need more system security.
http://publib.boulder.ibm.com/infocenter/pseries/v5r3/index.jsp?topic=/com.ibm.aix.security/doc/security/trusted_comp_base.htm

2. See above URL.

3. If not, you probably don't have a secure system to begin with. And with
an insecure system, how can you trust that by enabling TCB (without a fresh
start), your resulting system will be secure?

Hope these (incomplete) answers get you thinking more.
Orphy
#AIX-Forum

Originally posted by: SystemAdmin

thanks for your nice help, however let me say from the bottom of my heart that maybe the info center is handy for others but I think it sucks, nothing but cold official isolated pieces of infomation that is undoutedly unfriendly to newbies...
#AIX-Forum

Originally posted by: orphy

I'm not speaking of TCB in particular but a newbie does have a lot of
resources to learn about AIX. Infocenter might not be the best place
to go to but it does help sometimes. I'm pretty sure that once you know
what AIX is capable of, you will like it.

http://www.redbooks.ibm.com/
http://www-128.ibm.com/developerworks/aix
Orphy
#AIX-Forum