HP-UX Secure Resource Partitions (SRP) A.02.01 Administrator's Guide

16
configure the IPFilter service with SRP if you are using Bastille to manage IPFilter rules. If Bastille is
managing IPFilter rules, the /etc/opt/ipf/ipf.conf or /etc/opt/ipf/ipf.conf file contains
a statement similar to the following:
# WARNING: This file was generated automatically and will be replaced
# the next time you run Bastille. DO NOT EDIT IT DIRECTLY!!!
1.3.7 Compatibility with PRM SRP Commands
The HP PRM product includes the following commands to associate a Security Containment
compartment with a PRM group:
• prm2scomp
• scomp2prm
• srpgen
HP recommends that you use the srp utility instead of the PRM SRP commands. You cannot use the
srp utility to manage with Security Containment compartments and PRM groups created with the
above commands, but SRP compartments can coexist with these compartments and PRM groups.
1.3.8 Serviceguard Support
All Serviceguard daemons must run in the INIT compartment
1.4 Installing SRP
The HP-UX-SRP bundle consists of two products: CMGR and SRP. To use SRP, you must install both
products in the bundle.
For system and environment requirements, refer to the HP-UX SRP A.02.01 Release Notes. You can
acquire and install HP-UX Secure Resource Partitions free of charge from Software Depot:
http://www.software.hp.com
1.5 Migration A.02.00/A.02.00.01 to A.02.01
If you are upgrading the HP-UX SRP product to the A.02.01 version, stop the SRP’s before running the
swinstall.
During the upgrade, the modified files will be retained as follows:
1. The following files, if modified, will be retained. The new files will only be installed under the
respective newconfig directory:
/etc/rc.config.d/srpconf
2. The following files, if modified, will be moved to .old and the new files will be copied there.
/etc/opt/hpsrp/cmpt/apache.srp_incl
/etc/opt/hpsrp/cmpt/base.srp_incl
/etc/opt/hpsrp/templates/srpdefaults.cst
/etc/opt/hpsrp/cmpt/oracledb.srp_incl
/etc/opt/hpsrp/cmpt/sshd.srp_incl
/opt/hpsrp/bin/util/secsh_setup
/opt/hpsrp/bin/util/srp_backup
/opt/hpsrp/bin/util/srp_restore
/opt/hpsrp/bin/util/apache_setup
3. Any other files will be replaced with the new files. Therefore, manually copy the files to retain
your changes.