Security and Network SetupSystem Guide 3-13The DocuSP product operates on the default Solaris OSconfiguration and some additional Solaris patches requiredby DocuSP. Several scripts are used to provide additionalsecurity for the DocuSP. Not all scripts are public knowledge,only those that are public are defined in this document andthese can be performed by the customer.It is the responsibility of the administrator to implement anysecurity changes to this default configuration to obtain thelevel of security the environment requires. This includes:monitoring security bulletins issued by Sun Microsystems,obtaining and installing security patches, and modifying of theSolaris OS to implement security measures. The customer isalso responsible for documenting and testing theimplemented changes to ensure that there is no impact to thecurrent workflow.Xerox strongly recommends that the customer changepasswords from the default settings since the ultimatesecurity of the printing system resides with the customer.NOTE: Please be aware that the Xerox Customer SupportPersonnel must have access to the new root password forservice and support. It is the customers responsibility toensure that the root password is available for them.Security tipsThe following recommendations will enhance security.Configure for xrxuserThe DocuSP controller can be configured to force theadministrator to log in as xrxusr when the system is rebooted.To do this, perform the following:1. Set up the xrxusr password as root user in a terminaltype: passwd xrxusr enter as root user. The user will beprompted for the new password.2. Edit the DocuSP startup file as root user in a terminalwindow type: cd /opt/ XRXnps/XRXinit/bin enter.3. Make a backup of the original startup file by typing: cpXRXnps_Start XRXnps_Start.orig. Type:/usr/openwin/ bin/textedit XRXnps_Start enter. In the Text Editor window,scroll down to the bottom of the file and add a # sign infront of the line that reads: su - $user.
