HP-UX Secure Resource Partitions (SRP) A.02.01 Administrator's Guide

42
This script also adds or deletes the default gateway route for the compartment interface. This script is
executed when the srp -start or srp -stop command is executed for the compartment. By
default, it is also executed when the system starts up or shuts down.
The /var/hpsrp/compartment_name/sbin/init.d/srp_net file is linked to
/var/hpsrp/compartment_name/sbin/init.d/rc2.d/S340srp_net and
/var/hpsrp/compartment_name/sbin/init.d/rc1.d/K660srp_net.
For more information about SRP initialization and shutdown scripts, see 12 Starting and Stopping
SRP Compartments.
Security Containment Compartment
If the IP address is not already owned by another compartment, SRP adds a network interface rule for
the IP address to the compartment rule file (/etc/cmpt/compartment_name.rules).
6.1.5 The init Service
The init service creates startup and shutdown scripts for the compartment, and a compartment-
specific init directory structure that replicates the /sbin/init.d directory structure. SRP also
configures the autostart feature for the compartment so that the system startup and shutdown
scripts automatically execute the compartment startup and shutdown scripts.
6.1.5.1 Input Data
SRP prompts for the following data. You can also specify a variable name and value in the command
line, as described in
13.1 Creating an SRP Compartment or Adding Data to a Compartment.
Autostart SRP
at system boot
Specifies if you want the SRP to be started at system boot time.
Variable Name: autostart.
Default: yes.
6.1.5.2 Configuration Data
SRP configures the following data:
• SRP adds the following entries to the /etc/rc.config.d/srpconf file to enable the
autostart feature for the compartment:
SRP_NAME[n]="compartment_name"
START_SRP[n]=1
Where n is a unique index number and compartment_name is the name of the
compartment.
• SRP creates \ compartment-specific init subdirectories below the
/var/hpsrp/compartment_name/sbin that contain startup and shutdown scripts. For
more information about the directory structure, files, and how they are executed at system
startup and shutdown time, see 12 Starting and Stopping SRP Compartments.
6.1.6 The login Service
The login service enables you to specify the set of HP-UX users and HP-UX user groups whose
members are authorized to log in to the compartment. If you do not configure the login service and
you are using the default RBAC system configuration, only the root user is authorized to log in to the
compartment.