Endpoint Administration Guide for UNIX › Managing Policy Models › Automatic Rule-based Policy Updates › Using the seagent and sepmdd Daemons › Using a Shadow File

Using a Shadow File

Usually, sepmdd does not use a shadow file when updating a native environment. You can, however, set up a shadow file. To do this, set the UseShadow token in the [pmd] section of the pmd.ini file to yes.

If the UseShadow token is set to yes, sepmdd uses a default shadow file in the same directory as the PMDB. If you want to change the location of the shadow file, specify the new location with the YpServerSecure token in the [pmd] section of the pmd.ini.

If you change the location of the shadow file (with the YpServerSecure), to the local host's shadow file (for example, /etc/shadow), sepmdd sets a token, UseSystemFiles, to yes.

Important! Do not change the UseSystemFiles token yourself. The sepmdd or seagent daemons change it automatically.

Note: For more information about the seagent or sepmdd daemons, see the seagent and sepmdd utilities in the Reference Guide.