Installation

2

In Solaris 2.3, BSM is included in the full release and is part of the release media. You do not need to separately install BSM with this release as BSM is now enabled or disabled by running one of two simple scripts. All of the BSM software is included in the initial system installation, provided you install the following packages:

SUNWcar Core Architecture, (Root).

SUNWcsr Core Sparc, (Root).

SUNWcsu Core Sparc, (Usr).

SUNWhea Header Files.

SUNWman On-line Manual Pages.

The following procedures should only be performed by the user root. Additionally, the commands should only be run on a server or stand-alone system and never on a diskless client.

Enabling BSM

After becoming root, bring the system into the single user mode using the telinit(1) command.


  # /etc/telinit 1

In single user mode, change directories to the /etc/security/audit directory, and execute the bsmconv(1M) script located there. The script sets up a standard Solaris machine to run Solaris with BSM after a reboot.


  # cd /etc/security  
  # ./bsmconv

After the script finishes, halt the system with the telinit command. Then reboot the system to bring it up as a multiuser BSM system.


  # /etc/telinit 0  
  > b (or "boot" if the prompt is "OK>")

Disabling BSM

If at some point BSM is no longer required, BSM can be disabled by running bsmunconv (see the bsmconv(1M) man page). Again, first bring the system into the single user mode using /etc/telinit(1), then move to the /etc/security/audit directory and run bsmunconv(3M).


  # cd /etc/security/audit  
  # ./bsmunconv

After unconverting the system, reboot the system to run as a multiuser Solaris machine.


  # /etc/telinit 6

BSM and Client/Server Relationships

Solaris 2.1 required two additional procedures for adding and deleting diskless clients from a BSM-enabled system. With the bundling of BSM into Solaris 2.3, those procedures are no longer necessary. Enabling BSM on a server now automatically enables the BSM features on all of that server's clients.