Boot process
New boot scripts added to the /etc/inittab file on Trusted AIX® systems. The new boot scripts are rc.mls.boot, rc.mls.net, and rc.mls, and are executed in that order.
The steps executed in the rc.mls.boot script are:
- An interactive integrity check is run to prompt the user for information on how to handle each discrepancy (using the trustchk command)
- Set the configuration mode kernel security flags (using the setsecconf command)
- Set the system labels (Minimum and Maximum Sensitivity Labels and Integrity Labels)
- The configuration mode kernel security flags are displayed on the screen
The steps executed in the rc.mls.net script are:
- Initialize the Trusted AIX sub-system.
- If the /etc/security/rules.int file exists, it will load the rules database into the kernel.
The steps executed in the rc.mls script are:
- Initialize the Trusted AIX sub-system.
- If the /etc/security/rules.int file exists, it will load the rules database into the kernel.
Note: Any change to the boot scripts can result in a system malfunction.