Supplement for Installing Adaptive Server for Common Criteria Configuration

Special installation instructions

To install the server in the evaluated configuration:

Install adaptive server from CD. Installation instructions can be found in the Installation Guide for your platform. While performing the installation, select the following options:
- when prompted to choose between typical, full or custom install, choose typical install.
- when prompted to configure new servers, choose “Adaptive Server” only.
Follow instructions in installation guide to install license option for Sybase Security and Directory Services package.

isql -Usa -P -S<your_server_name>
1> sp_locklogin 'probe', 'lock'
2> go
Account locked.
(return status = 0)

Additionally, on Windows installations, lock the mon_user login:

1>sp_locklogin 'mon_user', 'lock'
2> go
Account locked.
(return status = 0)

Ensure that all physical devices created by the installation process have write permission only for the operating system user who installs, configures and runs Adaptive Server (generally user “sybase”). On a UNIX machine, this can be verified using the following command:
```
% ls -l
total 271200
-rw-rw-r--   1 sybase  sybase   31457280 May 13 13:55 master.dat
-rw-rw-r--   1 sybase  sybase   125829120 May 13 13:48 sproc.dat

% chmod 640 master.dat sproc.dat

% ls -l
total 271200
-rw-r-----   1 sybase  sybase   31457280 May 13 13:55 master.dat
-rw-r-----   1 sybase  sybase   125829120 May 13 13:48 sproc.dat
```
The above commands assume that OS files master.dat and sproc.dat were used to create the master and sybsystemprocs devices. This verification should be carried out for any new devices created during the lifetime of Adaptive Server. For more information on managing devices in Adaptive Server, see the System Administration Guide.
To configure auditing, see the “Auditing” chapter in System Administration Guide.
To configure login triggers, see the “Managing User Permissions” chapter in System Administration Guide.

The Evaluated Configuration does not enable any other options.