Xerox 6100BD - Phaser Color Laser Printer, Системное руководство

Страница: 63 / 140

Security and Network Setup
System Guide 3-13
The DocuSP product operates on the default Solaris OS
configuration and some additional Solaris patches required
by DocuSP. Several scripts are used to provide additional
security for the DocuSP. Not all scripts are public knowledge,
only those that are public are defined in this document and
these can be performed by the customer.
It is the responsibility of the administrator to implement any
security changes to this default configuration to obtain the
level of security the environment requires. This includes:
monitoring security bulletins issued by Sun Microsystems,
obtaining and installing security patches, and modifying of the
Solaris OS to implement security measures. The customer is
also responsible for documenting and testing the
implemented changes to ensure that there is no impact to the
current workflow.
Xerox strongly recommends that the customer change
passwords from the default settings since the ultimate
security of the printing system resides with the customer.
NOTE: Please be aware that the Xerox Customer Support
Personnel must have access to the new root password for
service and support. It is the customers responsibility to
ensure that the root password is available for them.
Security tips
The following recommendations will enhance security.
Configure for xrxuser
The DocuSP controller can be configured to force the
administrator to log in as xrxusr when the system is rebooted.
To do this, perform the following:
1. Set up the xrxusr password as root user in a terminal
type: passwd xrxusr enter as root user. The user will be
prompted for the new password.
2. Edit the DocuSP startup file as root user in a terminal
window type: cd /opt/ XRXnps/XRXinit/bin enter.
3. Make a backup of the original startup file by typing: cp
XRXnps_Start XRXnps_Start.orig. Type:/usr/openwin/ bin/
textedit XRXnps_Start enter. In the Text Editor window,
scroll down to the bottom of the file and add a # sign in
front of the line that reads: su - $user.