HP-UX IPFilter v18.21 Administrator Guide HP-UX 11i v3 (761995-001, March 2014)

2. Use the kmsystem command to find the status of each module. See the kmsystem(1M)
manpage for more detail. For example:
$ kmsystem -q pfil
LoadableConfiguredModule
YYpfil
The output is similar for the ipf module. This output shows that the pfil module is loadable.
3. Use the kmsystem command to set the loadable parameter to N.
$ kmsystem -l N -c Y ipf
$ kmsystem -q ipf
LoadableConfiguredModule
NYipf
$ kmsystem -l N -c Y pfil
4. Use the following command to build the new kernel with the modified configuration:
$config /stand/system
5. Use the kmupdate command to prepare the system to boot from the new kernel during the
next system shutdown.
$ kmupdate /stand/build/vmunix_test
$ shutdown -r 0 # Shutdown the system now
This boots the system using the new kernel that has both IPFilter modules statically linked.
CAUTION: If you need to remove or update IPFilter software, you must reconfigure the ipf and
pfil modules to link dynamically into the kernel. The install and remove scripts for IPFilter assume
the IPFilter modules to be dynamically linked. Do not try installing a newer version or removing
the existing IPFilter product if it is statically linked to the kernel.
Static linking of HP-UX IPFilter on HP-UX 11i v1 123