To Remove SunScreen

1. If you have used Proxies in your configuration:

   Remove all rules that use proxies (or else instantiate a policy that uses no proxies) to restore the sendmail and inetd daemons to their original Solaris functionality. On configurations with a number of centrally managed Screens, it may be simpler to restore these daemons manually:

   1. If the FTP or telnet proxies are in use, the ftp or telnet services will have been commented out in /etc/inet/inetd.conf (preceded with #efs#); for example:

      #efs#ftp stream tcp nowait root /usr/sbin/in.ftpd in.ftpd #efs#telnet stream tcp nowait root /usr/sbin/in.telnetd in.telnetd

      Remove the commenting prefix (#efs#).

   2. If the SMTP proxy is in use, in /etc/init.d/sendmail, the command that invokes sendmail as a listening daemon will have been altered to look like:

      /usr/lib/sendmail -q15m & #efs{-bd}

   Move the commented {-bd} option back into its original location:

   /usr/lib/sendmail -bd -q15m &

2. Use pkgrm to remove the software packages originally installed on the machine. See "To Install the Software on the Administration Station," or "To Install the Screen" for a list of the software packages to remove.

3. To remove the configurations and log files, you must remove the files:

   • /var/opt/SUNWicg and its descendants, which contains the SunScreen packet logfiles.

   • /etc/opt/SUNWicg and its descendants, which contains the SunScreen configurations and policies.

   • /etc/skip and its descendants, which contains the SKIP keys and certificates.

     ---

     Note -

     These three sets of files are not removed as part of the pkgrm command. Therefore, you must remove these files manually, if you are done with them.

     ---

If you do not remove these files and reinstall the software, the old configurations and rules are retained, in addition to the Initial policy. You may end up with unwanted duplicates. You can delete these using the administration GUI.

If you do not remove the old SKIP keys and certificates, when the software is reinstalled multiple Screen identities will be created. To remove the SKIP identities completely, read more about skiplocal and skipdb in the SunScreen SKIP 1.5.1 User's Guide.