Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP-UX System Administrator's Guide: Security Management: HP-UX 11i Version 3 > Chapter 7 Compartments

Modifying Compartment Configuration


Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

You can create new compartments and modify existing compartments without rebooting the system. If you enable or disable the compartment feature, or completely remove a compartment, you must reboot the system. However, if you remove all rules associated with a compartment and all references to that compartment, you can leave the compartment on the system until the next reboot.

See Section  for more information about the implications of changing the name of a compartment.

You can add new compartment rules, delete unneeded rules, and modify existing rules. You can also change the names of existing compartments.

To following sections describe how to modify compartment configuration.

Changing Compartment Rules

  1. (Optional) Make temporary backup copies of the configuration files you plan to modify. Either put these files outside the /etc/cmpt directory or omit the .rules suffix. Doing this lets you easily revert to the starting point if an editing problem occurs.

  2. Use the following command to examine the current compartment rules:

    # getrules
  3. Create or modify compartment rules. See Section  for instructions on completing this step and for a complete description of compartment rules syntax.

  4. (Optional) Preview the compartment rules by entering the following command:

    # setrules -p

    The -p option parses the configured rules list and reports any discrepancies in syntax and semantics. HP recommends that you follow this step before enabling compartment rules on the system.

  5. (Optional) Make backup copies of the compartment configuration files.

  6. Run the setrules command to load the configured rules:

    # setrules

Changing Compartment Names

You can change the names of compartments. However, changing the name of a compartment can affect applications that are already configured with the existing compartment names. If you change the name of a compartment, you must reconfigure any applications configured in that compartment as well.

NOTE: If you rename a compartment, you have essentially created a new compartment and removed the compartment with the old name. You must change all references to see the new compartment. The old compartment continues to exist on the system until a reboot.
Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2008 Hewlett-Packard Development Company, L.P.