HP UX Security Products and Features Software manual Ibac add and delete program

Page 47

*wliapitest.c

*/

#include<stdio.h>

 

#include<fcntl.h>

 

#include<sys/errno.h>

 

#include<api.h>

 

 

#define IBAC_TEST

"ibac_test"

main(int argc, char *argv[])

wli_fap_t

ptype = WLIAPI_FAP_IBAC;

wliapi_err_t

err = WLIAPI_SUCCESS;

int

 

fd = 0;

fd = open(IBAC_TEST, O_CREATO_TRUNCO_RDWR, 0666); if ( fd < 0 ) {

(void) fprintf(stderr,

"Failed to create a test file; error %d\n", errno); return(-1);

}

close(fd);

err = wli_add_fap(IBAC_TEST, ptype); if (err) {

fprintf(stderr, "Failed to add fap %d\n", err); return(-1);

}

err = wli_check_fap(IBAC_TEST, ptype, WLIAPI_FREAD); if (err) {

fprintf(stderr, "Failed to check fap %d\n", err); return(-1);

}

err = wli_del_fap(IBAC_TEST, ptype); if (err) {

fprintf(stderr, "Failed to del fap %d\n", err);

}

return(err);

}

A.4 IBAC add and delete program 47

Image 47
Contents HP-UX Whitelisting A.01.00 Administrator Guide Copyright 2010 Hewlett-Packard Development Company, L.P Table of Contents HP Serviceguard considerations Glossary Index List of Figures List of Examples Page File lock access controls Security featuresFile access policies Capabilities Identity-based access controls4 api Page WLI architecture Product overviewApplication API CommandsApplications WLI metadata files WLI database3 .$WLISIGNATURE$ Page Generating keys Key usageUser keys Administrator keysInstalling WLI Installing, removing, and upgradingInstallation requirements Removing WLI Upgrading WLI Page Authorizing administrator keys ConfiguringAuthorizing the recovery key Backing up the WLI database Signing DLKMsRebooting to restricted mode Page Creating a Flac policy Enhancing security with WLISigning an executable binary Creating an Ibac policy Removing a file access policyEnabling DLKMs to load during boot # kcmodule ciss=unused # wlisign -a -k /home/admin1/adminpriv /usr/conf/mod/cissWlisign -a -k adminpriv /usr/sbin/kcmodule Loading unsigned DLKMsPage WLI database files Backup and restore considerationsOverview Recommendations Policy protected and metadata filesWrite protected Read/write protected filesMetadata files Flac policiesIbac policies Page WLI database HP Serviceguard considerationsAdministration Policy protected files Lost WLI administrator key or passphrase Troubleshooting and known issuesSoftware distributor issues WLI reinstallation# kcmodule wli=unused # shutdown -r Wlisyspolicy -s mode=maintenance -k adminkeySu root # rm -r /etc/wli # tar -xf /tmp/wlikeydb.tarRelated information Support and other resourcesContacting HP User input Typographic conventionsWebsites Times Page # su wliusr1 # make cleanInstructions # make allIbac add and delete program Flac add and delete programIbac add and delete program Page Administration examples Su root # wlisign -a -k adm1.pvt /usr/bin/tar Wlicert -s -c wli.admin1 -o wmd -k adm1.pvtWlisys -k adm1.pvt -s wmdstoretype=pseudo Tar -vtf tartest.tarBdf mydir Cat /tmp/.$WLIFSPARMS$Bprestore -f backuplist Bpbackup -f backuplistAuthorizing a user key Quick setup examplesConfiguring WLI Authorizing an administrator keyEnabling a Flac policy Testing a Flac policyFlac policies Creating a Flac policyIbac policies Removing an Ibac policy Disabling an Ibac policyASM GlossaryPage Index SymbolsIndex
Related manuals
Manual 130 pages 58.55 Kb