secdefs(1M)

secdefs -- report settings of security defaults

Synopsis

/usr/sbin/secdefs [ -v ] [ -a | level ... ]

Description

secdefs compares the current settings of the system-wide security defaults with the security levels defined in /etc/security/seclevel (high, improved, traditional, and low). secdefs reports the name of the closest security level that has the least number of differences.

secdefs takes the following options and arguments:

-v

Displays a table of the actual differences as well as a count. The three columns of the table display:

the name of a default file in /etc/default
a keyword entry in the default file
the currently assigned value of the keyword, and the value defined by the security level

-a

Displays comparisons for each security level defined in /etc/security/seclevel, in order of increasing number of differences.

level

Reports differences for each of the named levels.

Files

/etc/security/seclevel/level/etc_def: security level defaults
/etc/default/: current default settings

References

default(4), idtune(1M), relax(1M)

Notices

secdefs examines only the etc_def file in the directory /etc/security/seclevel/level. It does not compare values set in the script file against the current security defaults.