|
What is
the difference between objects_5_0.C and objects.C (NG)
The main difference
between the two files is that:
The old FWDIR/conf/objects.C serves Module needs, whereas the new FWDIR/conf/objects_5_0.C
file serves Management Server needs.
objects_5_0.C is the master file which controls the creation of objects.C
for Module needs.
As objects_5_0.C is the master file, and is the one that Module process
fwm uses for its normal operation, it needs to be created during a new
installation or an upgrade installation.
Once objects_5_0.C is created, the Module objects file (objects.C) is
generated for Module purposes only. It is generated:
* when a new Security Policy is installed,
* when installing a database and
* for some specific 'fw' commands as follows:
1. The FireWall-1 post-installation script runs 'fw confmerge', to
complete the upgrade.
Then 'fw cpmi_upgrade' runs (transparently to the user) to upgrade to cpmi
format, and objects_5_0.C is created.
objects.C is now no longer relevant and is deleted, and objects_5_0.C is
now the only database file on the Management Server.
2. When fwm starts, the existence of objects_5_0.C is checked. If it does
not exist, fwm runs the internal converter to create it from the existing
objects.C.
Note: Manual changes to objects.C will have no effect since a new
objects.C file will be produced in the next Policy installation and all
changes will be lost.
23ST JAN 2003 JIM PARKER
<
back
|