HP-UX Secure Resource Partitions (SRP) A.02.01 Administrator's Guide

24
The root user logs in from the INIT compartment to mySRP SRP as user admin1 with a new login
session in the mySRP:
# /opt/hpsrp/bin/srp_su mySRP – admin1
User admin1 logs in from the INIT compartment to mySRP SRP as admin2 with a new login session,
where admin2 is configured for compartment login.
Create a new RBAC rule to allow user admin1 to use the srp_su command as follows:
1. Create a new hpux.security.srp_su authorization.
# authadm add hpux.security.srp_su
2. Create a new SRPsu-mySRP role:
# roleadm add SRPsu-mySRP
3. Assign the hpux.security.srp_su authorization to the SRPsu-mySRP role for mySRP:
# authadm assign SRPsu-mySRP hpux.security.srp_su "mySRP"
4. Assign user admin1 to the SRPsu-mySRP role:
# roleadm assign admin1 SRPsu-mySRP
Verify that the role was assigned properly by using the srp_su command to create a session in
mySRP, as follows:
# /opt/hpsrp/bin/srp_su mySRP – admin2
The correct admin2 user password will allow admin2 to login to the mySRP SRP.