Symantec Critical System manual Permanently disabling Solaris agents, Boot -as

92

Installing UNIX agents

Disabling and enabling UNIX agents

After you disable the driver, apply the Null prevention policy or a prevention policy in which prevention was disabled. Reboot the system.

Warning: You should perform these procedures only in emergency situations.

To temporarily disable the IPS driver

1Interrupt the boot cycle with a Stop-a or break sequence.

2At the ok prompt, type and run the following command:

boot -as

You must include the s switch in the boot command to boot into single-user mode. If you omit the s switch, then once the system boots into multi-user mode, it will enable the Symantec Critical System Protection driver.

3When the boot sequence asks for the location of your /etc/system file, type one of the following:

/etc/system-pre-sisips /dev/null

Permanently disabling Solaris agents

If you have performance issues with Solaris agents, you may need to permanently disable them.

The following procedure disables an agent, not the driver. The driver will still be running.

Warning: You should perform these procedures only in emergency situations.

To permanently disable Solaris agents

1Open a Terminal window and become superuser.

2Type and run the following commands:

/etc/init.d/sisipsagent stop /etc/init.d/sisidsagent stop

3Type and run the following commands to rename the agent scripts, which temporarily break any symbolic links in the rc#.d startup scripts:

mv /etc/init.d/sisipsagent /etc/init.d/sisipsagentOFF mv /etc/init.d/sisidsagent /etc/init.d/sisidsagentOFF