SunSHIELD Basic Security Module Guide

Enabling BSM

After becoming root, bring the system into the single-user mode using telinit (see the init(1M) man page).


# /etc/telinit 1

In single-user mode, change directories to the /etc/security directory, and execute the bsmconv script located there. The script sets up a standard Solaris machine to run BSM after a reboot.


# cd /etc/security
# ./bsmconv

After the script finishes, halt the system with the telinit command. Then reboot the system to bring it up as a multiuser BSM system.


# /etc/telinit 6

Note -

The bsmconv script adds a line to /etc/system to disable the ability to abort the system using the Stop-a keyboard sequence. If you want to retain the ability to abort the system using the Stop-a keyboard sequence, you must comment out the line that reads "set abort_enable = 0" in /etc/system.