22
edits
Changes
→Access to Stored Cryptographic Software and Cryptographic Programs
===Access to Stored Cryptographic Software and Cryptographic Programs===
When installing the NSS cryptographic module library files, the operator shall use the <code>chmod</code> utility to set the file mode bits of the library files to '''0755''' so that all users can execute the library files, but only the files' owner can modify (i.e., write, replace, and delete) the files. For example,
$ chmod 0755 libsoftokn3.so libfreebl*3.so libnssdbm3.so
The file mode bits can be verified with the <code>ls</code> utility. For example,
$ ls -l libsoftokn3.so libfreebl*3.so
-rwxr-xr-x 1 wtchang wtchang 455411 Jun 8 17:07 libfreebl3.so
-rwxr-xr-x 1 wtchang wtchang 1052734 Jun 8 17:07 libsoftokn3.so
-rwxr-xr-x 1 wtchang wtchang 263540 Jun 8 17:07 libnssdbm3.so<div class=note>On HP-UX PA-RISCwindows, replace the <code>.so</code> suffix by <code>.sldll</code> in the above commands. On Mac OS X, replace the <code>.so</code> suffix by <code>.dylib</code> in the above commands.</div>
===Access to Cryptographic Keys, CSPs, and Plaintext Data===
