wli.5 (2011 03)
wli(5) Optional WLI Product Required
wli(5)
wliadm(1M) Manage WLI administrator keys.
wlicert (1M) Manage WLI public keys.
wlisys (1M) Manage WLI configuration attributes.
wlisyspolicy (1M) Manage WLI system-wide security policies.
wlitrace (1M) Control tracing of WLI kernel modules for problem determination. This command
requires superuser privilege.
libwliapi (3) A shared library containing functions for managing WLI policies.
wlicert.conf (4) WLI capabilities configuration file.
wlisys.conf (4) WLI configuration file for parameter initialization.
wlisyspolicy.conf(4) WLI configuration file for file access policies.
WLI DOCUMENTATION
For configuration and setup details of WLI following installation, see HP-UX Whitelisting A.01.00
Administrator Guide at
http://www.hp.com/go/hpux-security-docs
.
AUTHOR
HP-UX Whitelisting was developed by HP.
DIRECTORIES AND FILES
/etc/wli/certificates
WLI database directory containing files holding authorized
public key information. WLI uses RSA public keys for WLI
metadata verification and authentication of authorized execut-
ables. See wlicert (1) for details on authorizing WLI user keys.
This directory is protected from writes.
/etc/wli/keys WLI database directory containing files holding administrator
key information. WLI uses administrator keys for authorizing
execution of WLI administrator commands. See wliadm (1M)
for details on authorizing and managing administrator keys.
This directory is protected from read and writes.
/etc/wli/wlisys.conf
System configuration data describing the metadata storage
type for holding file access policies. See wlisys.conf (4) for
more information.
/etc/wli/wlisyspolicy.conf
System wide policy configuration data describing the WLI
security mode, FLAC enablement state, IBAC enablement
state, and the WLI security downgrade policy. See
wlisyspolicy.conf(4) for more information.
/etc/wli/wlicert.conf Information regarding capabilities assigned to user public
keys.
/opt/wli/bin WLI commands directory.
/opt/wli/examples WLI working examples directory.
/opt/wli/include/api.h WLI header containing definitions for API functions.
/opt/wli/man WLI manpage directory.
/opt/wli/lib/libwliapi.so WLI shared library for creating, modifying, and verifying file
access policies.
SEE ALSO
genrsa(1), rsa(1) wlipolicy(1), wlisign(1), wlitool(1), wliwrap(1), wlixfr(1), wliadm(1M), wlicert(1M),
wlisys(1M), wlisyspolicy(1M), wlitrace(1M), libwliap1(3), wlisys.conf(4), wlisyspolicy.conf(4).
4 Hewlett-Packard Company − 4 − HP-UX 11iv3: Sep 2010 Web Release