Commands Reference, Volume 3

mkC2admin Command

Purpose

Configure a system to operate in C2 Security Mode.

Syntax

mkC2admin { [ -m ] | [ -a address ] hostname }

Description

The mkC2admin command initializes the security directories for use in a C2 System configuration. The distributed database directories are created and symbolic links initialized. When a system is being configured as the Administrative Host (using the -m flag), an additional file system is created to hold the master copies of the administrative database files. Those files are stored in the directory /etc/data.master which has a logical volume name of hd10sec.

The administrative database files are divided into three categories. Those files that must be shared, those files that optionally may be shared, and those files that may not be shared. Optionally sharable files are described in the file /etc/security/files.config. That file consists of multiple lines of the format:

[y|n]|filename

and is editable by the administrator. To select an optionally sharable filename, the administrator sets the first field to the value y. To make an optionally sharable file be unshared, the field is set to the value n. All hosts in the C2 System must have an identical /etc/security/files.config file.

The system hostname must be defined in the /etc/hosts file at the time this command is run. If not, the IP address of the new C2 System Administrative Host may be provided with the -a option, and an entry will be added to /etc/hosts.

Flags

Parameters

Exit Status

0

The system has been properly configured to operate in the C2 mode.

1

The system was not installed with the C2 option.

2

The system could not be successfully configured to operate in C2 mode.

3

The system was previously configured to operate in C2 mode without having first been unconfigured.

Files

Related Information

The chC2admin command, isC2host command, lsC2admin command, rmC2admin command.