HP-UX IPFilter Version 15.01 Administrator's Guide

2. Use the kmsystem command to find the status of each module. See the kmsystem(1M)
manpage for more detail. For example:
$ kmsystem -q pfil
LoadableConfiguredModule
YYpfil
The output is similar for the ipf module. This output shows that the pfil module is
loadable.
3. Use the kmsystem command to set the loadable parameter to N.
$ kmsystem -l N -c Y ipf
$ kmsystem -q ipf
LoadableConfiguredModule
NYipf
$ kmsystem -l N -c Y pfil
4. Use the following command to build the new kernel with the modified configuration:
$config /stand/system
5. Use the kmupdate command to prepare the system to boot from the new kernel during the
next system shutdown.
$ kmupdate /stand/build/vmunix_test
$ shutdown -r 0 # Shutdown the system now
This boots the system using the new kernel that has both IPFilter modules statically linked.
CAUTION: If you need to remove or update IPFilter software, you must reconfigure the ipf
and pfil modules to link dynamically into the kernel. The install and remove scripts for IPFilter
assume the IPFilter modules to be dynamically linked. Do not try installing a newer version or
removing the existing IPFilter product if it is statically linked to the kernel.
142 HP-UX IPFilter Static Linking