Trusted Solaris Installation and Configuration

How to Update the Commands in a Role's Profile

When setting up a network or custom JumpStart install, some required commands are not available to the role because they are not in an execution profile assigned to the role. To add commands, programs, or scripts to the role's profile, you modify the "Custom Rolename Role" profile. For example, to add a command to the profile shell of the role root, you modify the Custom Root Role profile.

To Add a Command to a Role's Profile

  1. Log in as a user who can assume the role secadmin.

  2. As secadmin, at label admin_low, open the Profile Manager from the Solstice_Apps folder using the NIS+ naming service.

  3. Load the "Custom Rolename Role" into the Profile Manager.

  4. In the Commands view, type the pathname to the command.

    For example, to access the Trusted Solaris CDROM, type:


    Pathname: /cdrom/cdrom0
    
  5. In the list of Excluded commands, double-click the directory /cdrom/cdrom0.

  6. From the list of Excluded commands, choose the command to be added to the profile.

    To continue the above example, add setup_install_server to the Included list.

  7. Give the command all privileges and save the Custom Rolename Role profile.

To Verify That a Command is in a Role's Profile

  1. Log in as a user who can assume the role whose profile has been updated.

  2. Assume the role and launch a terminal from the role's workspace.

  3. Verify that the new profile is in effect in the new terminal by using the clist(1M) command.

    For example, to verify the command in the preceding example:


    # clist -p | grep setup_install_server
    It should display: /cdrom/cdrom0/setup_install_server: all
    # clist -i | grep setup_install_server
    It should display: none none /cdrom/cdrom0/setup_install_server
    

To Remove a Command from a Role's Profile

  1. As secadmin, at label admin_low, load the "Custom Rolename Role" into the Profile Manager.

  2. In the Commands view, locate and select the pathname to the command.

  3. From the list of Included commands, double-click the command to be moved to the Excluded list.

  4. Save the Custom Rolename Role profile.