HP-UX Secure Resource Partitions (SRP) A.02.01 Administrator's Guide

• The srp_su utility

• SRP templates, which manage configuration data for services

• The Configuration Synchronization Manager (CMGR) Utility and Libraries

1.2.1 The srp_sys Utility

The /opt/hpsrp/bin/srp_sys utility manages system-wide configuration properties for SRP. It is

required to run srp_sys –setup to configure the system for SRP prior to configuring individual SRPs on

the system. You can also use srp_sys to view and modify system-wide configuration settings for SRP.

1.2.2 The srp Utility

The /opt/hpsrp/bin/srp utility is an interactive program that prompts you for information and

creates an SRP compartment by configuring the subsystems described in the previous section. The

input parameters and configuration data created is determined by the templates and services you use

with srp, as described in XREF. The srp utility supports options to perform the following tasks:

• Create an SRP compartment or add data to an existing SRP compartment

• Display help information, including information about input parameters

• List the SRP compartment names and configuration data

• Replace configuration information for an existing SRP compartment

• Delete configuration information for an existing SRP compartment

• Start up or shut down an SRP compartment

• Run in batch (non-interactive) mode

• Restore all SRP configuration data to a previous state

• Report SRP level status

1.2.3 The srp_su command

The /opt/hpsrp/bin/srp_su command allows a user in the INIT compartment to execute a su(1)

command in the specified target SRP compartment. This can be used by system administrators for the

purpose of login or command execution within a SRP.

1.2.4 SRP Templates and Services

The input parameters and data configured by srp are determined by the templates and services

used. SRP templates are XML documents that define the configuration actions performed by SRP.

Configuration actions are grouped into SRP services. You can choose which services to apply to an

SRP, and apply services individually or collectively to an SRP compartment.

1.2.4.1 Templates

SRP includes the following templates:

• base

Configures a base SRP compartment without any application-specific parameters. A base

compartment consists of a Security Containment compartment, a compartment home directory

subtree, a compartment file system view, and other configuration data. After you create a

base SRP compartment, you can apply one of the following application templates to extend

the base with parameters suitable for applications hosted by a compartment.

• apache

Manages configuration data for running an HP-UX Apache-based Web Server in an SRP

compartment.