HP-UX Secure Resource Partitions (SRP) A.02.01 Release Notes

7
• Cannot start or stop an SRP successfully without the admin service.
Starting or stopping the SRP configured without the admin service results in the following
message:
privrun: no matching cmd found in cmd_priv database
Workaround:
Add the admin service to the SRP. Add the admin user with default user (root) as follows:
# srp -b -add mySRP -s admin
add RBAC admin role for compartment succeeded
•
The CompartmentLogin product is uninstalled after HP-UX 11.31 is updated
to the March or September 2009 release.
The ContainmentExt.CompartmentLogin product is automatically uninstalled when HP-
UX 11.31 is updated to the March (B.11.31.0903) or September (B.11.31.0909) release of
the HP-UX Operating Environment. The SRP product has a dependency on
ContainmentExt.CompartmentLogin for SRP compartment login and will not function
correctly without it.
Workaround:
Install the product bundle ContainmentExt from HP Software Depot after updating HP-UX
11.31 to the March or September 2009 release. HP recommends re-installing
ContainmentExt from HP Software Depot after installing SRP A.02.01, as follows:
1. Go to
http://software.hp.com and acquire the HP-UX Security Containment
Extensions software bundle.
2. When re-installing the bundle, run the swinstall command and specify
reinstall=true:
# swinstall –x reinstall=true -s \
/tmp/<containment_extensions_depot_name>.depot ContainmentExt
• SRP’s import operation will fail if Perl version D.5.8.8.F is installed on the
system
SRP’s import operation will fail if Perl version D.5.8.8.F is installed on the system. Determine
which version of Perl is installed on your system as follows:
# swlist perl
Workaround:
Install Perl from software depot (
http://software.hp.com).
• Customizations to SRP compartment include files are saved and removed
after updating to SRP A.02.01
SRP replaces the following SRP compartment include files after a product update to A.02.01:
/etc/opt/hpsrp/cmpt/apache.srp_incl
/etc/opt/hpsrp/cmpt/base.srp_incl
/etc/opt/hpsrp/cmpt/oracledb.srp_incl
/etc/opt/hpsrp/cmpt/sshd.srp_incl
/etc/opt/hpsrp/cmpt/tomcat.srp_incl
The original files are renamed with the .old extension. Existing SRP compartment
configurations do not utilize the renamed files.