Symantec Critical System - Manual (Page 92)

92 Installing UNIX agents
Disabling and enabling UNIX agents
After you disable the driver, apply the Null prevention policy or a prevention
policy in which prevention was disabled. Reboot the system.
Warning: You should perform these procedures only in emergency situations.
To temporarily disable the IPS driver
1 Interrupt the boot cycle with a Stop-a or break sequence.
2 At the ok prompt, type and run the following command:
boot -as
You must include the s switch in the boot command to boot into single-user
mode. If you omit the s switch, then once the system boots into multi-user
mode, it will enable the Symantec Critical System Protection driver.
3 When the boot sequence asks for the location of your /etc/system file, type
one of the following:
/etc/system-pre-sisips
/dev/null
Permanently disabling Solaris agents
If you have performance issues with Solaris agents, you may need to
permanently disable them.
The following procedure disables an agent, not the driver. The driver will still be
running.
Warning: You should perform these procedures only in emergency situations.
To permanently disable Solaris agents
1 Open a Terminal window and become superuser.
2 Type and run the following commands:
/etc/init.d/sisipsagent stop
/etc/init.d/sisidsagent stop
3 Type and run the following commands to rename the agent scripts, which
temporarily break any symbolic links in the rc#.d startup scripts:
mv /etc/init.d/sisipsagent /etc/init.d/sisipsagentOFF
mv /etc/init.d/sisidsagent /etc/init.d/sisidsagentOFF