List of Examples | HP UX Security Products and Features Software

List of Examples
B-1	Execute manual WLI configuration	49
B-2	Backing up policy protected files	49
B-3	Restoring policy protected files	50
B-4	Backup and restore without wliwrap	51

7

Image 7

HP UX Security Products and Features Software manual List of Examples

Contents

HP-UX Whitelisting A.01.00 Administrator Guide Copyright 2010 Hewlett-Packard Development Company, L.P Table of Contents HP Serviceguard considerations Glossary Index List of Figures List of Examples Page File access policies Security featuresFile lock access controls Capabilities Identity-based access controls 4 api Page WLI architecture Product overview Application API Commands Applications WLI metadata files WLI database 3 .$WLISIGNATURE$ Page Generating keys Key usage User keys Administrator keys Installation requirements Installing, removing, and upgradingInstalling WLI Removing WLI Upgrading WLI Page Authorizing the recovery key ConfiguringAuthorizing administrator keys Backing up the WLI database Signing DLKMs Rebooting to restricted mode Page Signing an executable binary Enhancing security with WLICreating a Flac policy Enabling DLKMs to load during boot Removing a file access policyCreating an Ibac policy # kcmodule ciss=unused # wlisign -a -k /home/admin1/adminpriv /usr/conf/mod/cissWlisign -a -k adminpriv /usr/sbin/kcmodule Loading unsigned DLKMsPage Overview Backup and restore considerationsWLI database files Recommendations Policy protected and metadata filesWrite protected Read/write protected files Ibac policies Flac policiesMetadata files Page Administration HP Serviceguard considerationsWLI database Policy protected files Lost WLI administrator key or passphrase Troubleshooting and known issuesSoftware distributor issues WLI reinstallation # kcmodule wli=unused # shutdown -r Wlisyspolicy -s mode=maintenance -k adminkeySu root # rm -r /etc/wli # tar -xf /tmp/wlikeydb.tar Contacting HP Support and other resourcesRelated information Websites Typographic conventionsUser input Times Page # su wliusr1 # make cleanInstructions # make all Ibac add and delete program Flac add and delete program Ibac add and delete program Page Administration examples Su root # wlisign -a -k adm1.pvt /usr/bin/tar Wlicert -s -c wli.admin1 -o wmd -k adm1.pvt Wlisys -k adm1.pvt -s wmdstoretype=pseudo Tar -vtf tartest.tarBdf mydir Cat /tmp/.$WLIFSPARMS$ Bprestore -f backuplist Bpbackup -f backuplist Authorizing a user key Quick setup examplesConfiguring WLI Authorizing an administrator key Enabling a Flac policy Testing a Flac policyFlac policies Creating a Flac policy Ibac policies Removing an Ibac policy Disabling an Ibac policy ASM GlossaryPage Index Symbols Index