Administrator's Guide

contain rules referring to compartments for another component. If you must remove
a component, you can modify the compartment configuration more easily if the
compartment configurations are kept separate.
Create a single compartment configuration file for each software component.
This enables you to remove the compartment configuration easily if you remove the
software from the system. You can also find all rules pertaining to the software
component easily.
Some software products are shipped with compartment rules already configured.
Avoid modifying these rules.
Before you make modifications to shipped compartment configurations, be sure you
understand the existing configuration. Read the documentation for the software
product and examine the existing configuration carefully.
CAUTION: Do not redefine the existing INIT compartment. If you attempt to change
or redefine the INIT compartment, all automatically generated definitions will be
destroyed and compartments will not function properly.
6.3 Compartment Components
The compartments feature comprises a set of configuration files and commands you use
to configure and administer compartments. Manpages are included to assist you in using
the compartments features. These components are listed in the following sections:
6.3.1 Compartment Configuration Files
Table 6-1 briefly describes the files you use with compartment components.
Table 6-1 Compartment Configuration Files
DescriptionConfiguration File
The directory in which compartment rules files reside./etc/cmpt
The file containing the compartment rules configured for the
system.
/etc/cmpt/*.rules
Compartment configuration file used to enable or disable the
compartment login feature.
/etc/cmpt/cmpt.conf
The file containing valid mount points to be scanned to check
the consistency of compartment rules for files with multiple
hardlinks pointing to them.
/etc/cmpt/hardlinks/
hardlinks.config
6.3.2 Compartment Commands
Table 6-2 contains the commands you use to manage compartments.
112 Compartments