bsmconv.sh revision 7c478bd95313f5f23a4c958a745db2134aa03244
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License"). You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2005 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# ident "%Z%%M% %I% %E% SMI"
#
TEXTDOMAIN="SUNW_OST_OSCMD"
export TEXTDOMAIN
{
then
exit 1
fi
then
exit 1
fi
RESP="x"
do
gettext "This script is used to enable the Basic Security Module (BSM).\n"
echo "$form \c"
read RESP
done
then
exit 2
fi
}
# Do some sanity checks to see if the arguments to bsmconv
# are, in fact, root directories for clients.
{
do
then
# There is a root directory to write to,
# so we can potentially complete the conversion.
:
else
exit 4
fi
done
}
# bsmconvert
# All the real work gets done in this function
{
# then gripe about it.
then
fi
# move aside volume manager init file to prevent
# running volume manager when bsm is enabled
#
# find where volmgt is installed
#
then
then
then
then
if [ $? != 0 ]
then
exit 5
fi
fi
fi
else
fi
fi
# Turn on auditing in the loadable module
then
fi
if [ $? -ne 0 ]
then
fi
# Initial device allocation files
then
mkdevalloc > ${ROOT}/$DEVALLOC
fi
if [ ! -f $DEVMAPS ]
then
fi
# enable auditd. Since we're running as single user, auditd won't
# actually start until reboot.
}
# main loop
if [ $# -eq 0 ]
then
ROOT=
echo
gettext "The Basic Security Module is ready.\n"
gettext "If there were any errors, please fix them now.\n"
gettext "Reboot this system now to come up with BSM enabled.\n"
else
do
done
echo
gettext "The Basic Security Module is ready.\n"
gettext "If there were any errors, please fix them now.\n"
gettext "in the root directories of each host converted.\n"
gettext "Reboot each system converted to come up with BSM active.\n"
fi
exit 0