relax(ADM)

relax -- change system security defaults

Syntax

/etc/relax level

Description

relax changes selected system-wide security defaults to one of several predefined levels (high, improved, low, and traditional). The directories in /tcb/lib/relax are named for each level, and each directory contains three files:

default: specifies fields to be updated in the file /etc/auth/system/default.
etc_def: specifies files and values to be updated or removed in the directory /etc/default.
script: is a shell script which is run to make other changes to such settings as kernel parameters using configure(ADM), default umask settings by edits to various files, and other changes.

Examples

relax takes one argument, which should be the name of a directory in /tcb/lib/relax, for example:

relax improved

This reconfigures the system security settings to the ``improved'' level of security.

Limitations

If the script for the level you select makes changes to the kernel configuration, these changes will not come into effect until UNIX^® is rebooted.

Files

/tcb/lib/relax/level: security level directory
/etc/auth/system/files: File Control database
/etc/auth/system/default: System Defaults database
/etc/default/: files containing other current default settings

/etc/profile
/etc/cshrc: files edited by /tcb/lib/relax/level/script

Standards conformance

relax is not part of any currently supported standard; it is an extension of AT&T System V provided by The Santa Cruz Operation, Inc.