000-221 · Question #137
How can an administrator disable Role Based Access Control (RBAC) in a WPAR?
The correct answer is C. Run chdev -I mywpar -a enhanced_RBAC=false. In AIX, a WPAR is represented as a managed object in the ODM whose attributes can be modified with the chdev command, allowing enhanced RBAC to be disabled by name. The correct syntax targets the WPAR as a device object and sets the enhanced_RBAC attribute to false.
Question
How can an administrator disable Role Based Access Control (RBAC) in a WPAR?
Options
- ARun chattr -E -I sys0 -a enhanced_RBAC=false
- BRun the RBAC wizard and deselect 'Enable RBAC
- CRun chdev -I mywpar -a enhanced_RBAC=false
- DRun chwpar -a RBAC=false
How the community answered
(20 responses)- A10% (2)
- B5% (1)
- C80% (16)
- D5% (1)
Why each option
In AIX, a WPAR is represented as a managed object in the ODM whose attributes can be modified with the chdev command, allowing enhanced RBAC to be disabled by name. The correct syntax targets the WPAR as a device object and sets the enhanced_RBAC attribute to false.
The chattr command in AIX is used to change file and directory attributes on JFS2 filesystems and is not a valid command for modifying WPAR or system device ODM attributes.
AIX does not provide a graphical RBAC wizard for managing enhanced RBAC settings within individual WPARs; WPAR attribute changes are performed exclusively through command-line administration tools.
The chdev command modifies attributes of objects managed in the AIX ODM, and WPARs are addressable as such objects by their name using the -l flag. Running chdev -l mywpar -a enhanced_RBAC=false correctly targets the named WPAR and sets its enhanced_RBAC attribute to false, disabling Role Based Access Control within that partition without requiring a full system outage.
The chwpar command changes certain WPAR operational parameters such as hostname and resource controls, but enhanced_RBAC is not a supported attribute in chwpar syntax and this command will fail.
Concept tested: Disabling enhanced RBAC in an AIX WPAR via chdev
Source: https://www.ibm.com/docs/en/aix/7.3?topic=commands-chdev-command
Topics
Community Discussion
No community discussion yet for this question.