HP-UX Secure Resource Partitions (SRP) A.02.01 Administrator's Guide

Step 1: Setting Up SRP

In this example, the product has just been installed. The root user runs srp_sys -setup to

enable the subsystems managed by SRP.

HP requires that you run srp_sys -setup before using the srp utility, but you can run it anytime

that you want to change the default parameters for SRP or verify the status of the subsystems

configured by SRP.

For more information about srp_sys, see 2.1 The srp_sys Utility.

Step 2: Displaying Input Parameters for the base Template

Before creating a base SRP compartment, the user enters the srp -help -template base

command to view the input parameters for the base template. The srp utility displays usage and

general syntax information, then displays the input parameters for the default services used with the

base template.

# /opt/hpsrp/bin/srp -help -template base

srp -a[dd]|-d[elete]|-r[eplace] <compartment_name>

[-t[emplate] <template>] [-s[ervice] <service>,..] [-i[d]

<instance>]

[-b[atch]] [-v[erbose]][variable=<value>,..]

Variables: (used with -add, -replace, will vary by -template. Variables

without defaults must be supplied when executing with -b)

Template: base Service: default

Name Description

---------- -----------

admin_user Comma separated list of existing Unix user names to

be granted the RBAC administrator role for the SRP.

Default: root

login_group Comma separated list of existing Unix group names

allowed for login within the SRP.

Default: adm

login_user Comma separated list of existing Unix user names

allowed for login within the SRP.

Default: none

Step 3: Creating a Base SRP Compartment

To create a base SRP compartment, enter the following command:

srp -add compartment_name

Where compartment_name is the name of the SRP compartment you want to create. In this

example, the user specifies mySRP for the compartment name. In the srp dialog, the user specifies

the IP address 192.0.2.1 for the compartment address and lan1 for the network interface. The

user accepts the default values for all other variables.