IBM Security Guardium

  • 1.  STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 07:03 AM
    HI Everyone,

    Regularly we install GIM & STAP for Linux based machines to integrate with Guardium.

    below are the parameters:
    STAP_FIREWALL_INSTALLED - 1 - blocking, redaction and quarantine
    STAP_ENABLED - 1
    KTAP_ENABLED - 1
    KTAP_LIVE_UPDATE - Y

    and if it is flexi-loading mechanism. What are the extra parameters should we use?

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 07:08 AM

    Hi

    Please review below link:
    https://www.ibm.com/docs/en/guardium/11.3?topic=tap-linux-unix-preparing-install-k

    It states these are the three option when installing the STAP:

    • GIM installation: KTAP_ALLOW_MODULE_COMBOS
    • shell installation: --ktap_allow_module_combos
    • RPM: --set-flexload

    I hope that answers your query


    ------------------------------
    Mark Harris
    ------------------------------



  • 3.  RE: STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 08:25 AM
    Hi,
    Thanks for your answer.
    I regularly install GIM first and then through that STAP from CM. SO I need to use below parameters from CM to install STAP for flexi loading:

    STAP_FIREWALL_INSTALLED - 1 - blocking, redaction and quarantine
    STAP_ENABLED - 1
    KTAP_ENABLED - 1
    KTAP_LIVE_UPDATE - Y
    KTAP_ALLOW_MODULE_COMBOS - Y

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------



  • 4.  RE: STAP Flexi-loading for Linux bases systems

    Posted Fri September 17, 2021 09:15 AM
    Hi,

    Below is the GIM option in order to use the K-TAP flex load option, when installing the STAP:
    GIM installation: KTAP_ALLOW_MODULE_COMBOS

    Hope that helps...

    ------------------------------
    Mark Harris
    ------------------------------