relax(1M)

relax -- change system security defaults

Synopsis

/usr/sbin/relax level

Description

relax changes selected system-wide security defaults to one of several predefined levels (high, improved, low, and traditional). The directories in /etc/security/seclevel are named for each level, and each directory contains two files:

etc_def: specifies files and values to be updated or removed in the directory /etc/default.
script: is a shell script which is run to make other changes to such settings as kernel parameters using idtune(1M), default umask settings by edits to various files, and other changes.

Files

/etc/security/seclevel/level: security level directory
/etc/default/: files containing other current default settings
/etc/cshrc
/etc/inet/inetd.conf
/etc/lp/Systems
/etc/profile
/etc/shadow
/usr/lib/cron/at.allow
/usr/lib/cron/at.deny
/usr/lib/cron/cron.allow
/usr/lib/cron/cron.deny: files changed by /etc/security/seclevel/level/script

Examples

relax takes one argument, which should be the name of a directory in /etc/security/seclevel, for example:

relax improved

This reconfigures the system security settings to the ``improved'' level of security.

References

idtune(1M), secdefs(1M), umask(1)

Notices

If the script for the level you select makes changes to the kernel configuration, these changes will not come into effect until the system is rebooted.