nerdexam
IBM

000-221 · Question #130

An administrator has used setsecattr to associate authorizations with an AIX command. The appropriate stanza has been added to the privileged commands database (/etc/security/privcmds). What must be…

The correct answer is A. Run the setkst command to update the kernel security tables. After modifying AIX RBAC security databases, the setkst command must be run to load the updated definitions into the active kernel security tables.

Security

Question

An administrator has used setsecattr to associate authorizations with an AIX command. The appropriate stanza has been added to the privileged commands database (/etc/security/privcmds). What must be done before the new authorization can be used?

Options

  • ARun the setkst command to update the kernel security tables.
  • BAssign a new role that the authorization can be associated with and reboot.
  • CActivate the change in the security database with the updateauths command.
  • DRun the refreshsrc -g RBAC command to make the changes effective.

How the community answered

(40 responses)
  • A
    73% (29)
  • B
    15% (6)
  • C
    3% (1)
  • D
    10% (4)

Why each option

After modifying AIX RBAC security databases, the setkst command must be run to load the updated definitions into the active kernel security tables.

ARun the setkst command to update the kernel security tables.Correct

In AIX Role-Based Access Control, changes written to on-disk security databases - including /etc/security/privcmds and attributes applied with setsecattr - are not automatically reflected in the running kernel. The setkst command explicitly synchronizes the kernel security tables with the updated database, making new authorizations and privileged command definitions active immediately without requiring a reboot.

BAssign a new role that the authorization can be associated with and reboot.

Rebooting is not required to activate RBAC changes, and assigning a new role is a separate administrative step unrelated to pushing database changes into the kernel.

CActivate the change in the security database with the updateauths command.

updateauths is not a valid AIX command; no such utility exists in the AIX RBAC toolset for activating authorization database changes.

DRun the refreshsrc -g RBAC command to make the changes effective.

refreshsrc is a System Resource Controller command used to reload subsystem configuration parameters and has no effect on RBAC kernel security tables.

Concept tested: AIX RBAC setkst command to update kernel security tables

Source: https://www.ibm.com/docs/en/aix/7.3?topic=s-setkst-command

Topics

#RBAC#setkst#kernel security tables#privcmds

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 000-221 Practice