AIX

Hi all,
i have a little problem...
I have a Trusted AIX v. 6.1 installed on my system p.

I can't disable RBAC mode...

Code:

$ lsattr -El sys0 -a enhanced_RBAC
enhanced_RBAC true Enhanced RBAC Mode True

$ chdev -l sys0 -a enhanced_RBAC=false
Method error (/usr/lib/methods/chggen):
0514-018 The values specified for the following attributes
are not valid:
enhanced_RBAC Enhanced RBAC Mode

I have tried with user isso,sa,so (with swrole enable).

Any idea?

Thanks in advance.

Mario

Moderator's Comments:

Please use code tags, thanks!

Afaik Trusted AIX is very limited because of security needs (military standards etc... check the Redbook) and RBAC is a part of it to get the MLS (Multi Level Security) working.
I am not sure for Trusted AIX, but if you don't want to use it on a regular installation, you usually let it be "true" and just don't configure any roles, authorizations etc..

Maybe Trusted AIX is not what you are looking for? If you want to have a somewhat secure system and don't need MLS, RBAC etc., use the AIXpert maybe to secure your system as a start.

sigh.. my boss want a Trusted Aix installation but i though that i can disable only RBAC

thanks.

No offense - maybe explain your boss what a Trusted AIX installation means.
Taken from Help - AIX 7.1 Information Center
I had a colleague trying out Trusted AIX, it was so limited in options that the idea was just discarded.

Maybe there is a slight chance that there is an option how to turn off RBAC, but my assumption is, that it is not possible.