SunScreen 3.2 Administration Guide

Working With Policies

To Create a New Policy

    Use the ssadm command to add a new policy using local administration by typing:


    # ssadm policy -a policy_name
    

    Use ssadm -r to add the same policy using remote administration by typing:


    # ssadm -r Screen_name policy -a policy_name
    


Note -

If you create a new policy, it will not have the administrative access rules necessary for GUI or remote administration. It may be safer to copy an existing, working policy and modify it than to create a new policy.


To Copy a Policy

    Using local administration, use the -c option to copy a policy by typing:


    # ssadm policy -c policy_name policy_copy_name
    

    Using remote administration, use the -c option with the ssadm -r command to copy a policy by typing:


    # ssadm -r Screen-name policy -c policy_name policy_copy_name
    

To Rename a Policy

    Using local administration, rename a policy by typing:


    # ssadm policy -r old_name new_name
    

    Using remote administration, rename a policy by typing:


    # ssadm -r Screen_name policy -r old_name new_name
    

To Delete a Policy

    Using local administration, delete a policy by typing:


    # ssadm policy -d name
    

    Using remote administration, delete a policy by typing:


    # ssadm -r Screen_name policy -d name
    

To Verify a Policy

    Verify the validity of a policy, for example, myconfig, using local administration by typing:


    # ssadm activate -n myconfig
    

    Verify the validity of a policy, for example, myconfig, using remote administration by typing:


    # ssadm -r Screen_name activate -n myconfig
    

To Activate a Policy

    Activate a policy using local administration by typing:


    # ssadm activate myconfig
    

    Activate a policy using remote administration by typing:


    # ssadm -r Screen_name activate myconfig
    

To Back Up Your SunScreen Configuration

    Using local administration, type the following to back up a policies:


    # ssadm backup > filename
    

    Using remote administration, type the following to back up a policies:


    # ssadm -r Screen_name backup  > filename
    

To Restore Your SunScreen Configuration

    Restore policies using local administration by typing:


    # ssadm restore < filename 
    

    Restore policies for remote administration by typing:


    # ssadm -r Screen_name restore < filename