IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 07:03 AM
    HI Everyone,

    Regularly we install GIM & STAP for Linux based machines to integrate with Guardium.

    below are the parameters:
    STAP_FIREWALL_INSTALLED - 1 - blocking, redaction and quarantine
    STAP_ENABLED - 1
    KTAP_ENABLED - 1
    KTAP_LIVE_UPDATE - Y

    and if it is flexi-loading mechanism. What are the extra parameters should we use?

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 07:08 AM

    Hi

    Please review below link:
    https://www.ibm.com/docs/en/guardium/11.3?topic=tap-linux-unix-preparing-install-k

    It states these are the three option when installing the STAP:

    • GIM installation: KTAP_ALLOW_MODULE_COMBOS
    • shell installation: --ktap_allow_module_combos
    • RPM: --set-flexload

    I hope that answers your query


    ------------------------------
    Mark Harris
    ------------------------------



  • 3.  RE: STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 08:25 AM
    Hi,
    Thanks for your answer.
    I regularly install GIM first and then through that STAP from CM. SO I need to use below parameters from CM to install STAP for flexi loading:

    STAP_FIREWALL_INSTALLED - 1 - blocking, redaction and quarantine
    STAP_ENABLED - 1
    KTAP_ENABLED - 1
    KTAP_LIVE_UPDATE - Y
    KTAP_ALLOW_MODULE_COMBOS - Y

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------



  • 4.  RE: STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 09:15 AM
    Hi,

    Below is the GIM option in order to use the K-TAP flex load option, when installing the STAP:
    GIM installation: KTAP_ALLOW_MODULE_COMBOS

    Hope that helps...

    ------------------------------
    Mark Harris
    ------------------------------