5.Enable PRM’s application manager if it is not already enabled:
#prmconfig -e APPL
Alternatively, enable all PRM resource managers using prmconfig
#prmconfig -e
Assigning Unix groups to PRM groups
Unix groups are collections of users given Unix permissions as a whole. PRM allows you to map Unix groups to PRM groups without having to specify each user in the Unix group. With a Unix group record, any process running as a specific Unix group can be assigned to a PRM group.
You can add, modify, and remove assignments of Unix group to PRM groups as discussed in the following sections:
•“Adding/modifying a Unix group’s PRM group assignment ” (page 77)
•“Removing a Unix group’s PRM group assignment ” (page 78)
Unix group record syntax
This section explains the syntax of Unix group records.
Unix group records assign Unix group to PRM groups.
Use the following syntax when specifying a Unix group record:
#!UXGRP:UNIX_GROUP_NAME:{GROUP (NONE)} where
#!UXGRP | Indicates the start of a Unix group record. (The # character does not |
| denote the start of a comment in this case.) |
UNIX_GROUP_NAME Is the alphanumeric name (of no more than 255 characters) of an existing
| Unix group. |
| A Unix group can have no more than one record. |
| This record type yields precedence to application records, compartment |
| records, and user records. |
GROUP | The PRM group to which the Unix group is to be mapped. If you are using |
| group hierarchies, the group you specify must not have any child groups. |
(NONE) | You can specify (NONE) in place of a group name if you would like to |
| explicitly show in your configuration file that a Unix group is not to be |
| mapped to a PRM group. |
Consider the following example Unix group records:
#PRM Unix group records
#!UXGRP:finance_dept:finance #!UXGRP:users:(NONE) #!UXGRP:mail:tools/mail
These Unix group records map:
•The Unix group finance_dept into the group finance
•The Unix group users into the placeholder (NONE)
•The Unix group mail into the group tools/mail
Adding/modifying a Unix group’s PRM group assignment
To add or modify a Unix group record, follow these steps:
Configuring PRM 77