HP-UX Security Containment Extensions B.11.31.01.01 Release Notes
1 HP-UX Security Containment Extensions B.11.31.01.01
HP-UX 11i Security Containment includes three core technologies: compartments,
fine-grained privileges, and role-based access control. Together, these three components
provide a highly secure operating environment without requiring applications to be
modified. With HP-UX Security Containment Extensions, the HP-UX 11i v3 operating
system simplifies the configuration of application containment and enables compartment
login restrictions for enhanced application stacking and workload consolidation.
HP-UX Security Containment Extensions includes the following main components:
• The Containment Wizard tool that helps a system administrator setup and configure
a compartment.
• The compartment login configuration that enables users and administrators to
login directly to a compartment.
To acquire and install HP-UX Security Containment Extensions, go to Software Depot:
http://www.software.hp.com
1.1 Features
HP-UX Security Containment Extensions offers the following features:
• Containment Wizard
The application containment wizard, contain, is a tool that helps a system
administrator setup and configure a compartment. The contain tool creates a
compartment and configures the applications specified on the command line for
execution in the compartment. After the compartment has been created and the
applications have been configured, the contain tool gives the user an opportunity
to run these applications in the newly created compartment. The containment
wizard then collects the list of required access rules for these applications and
attempts to simplify these rules based on the system administrator's input.
• Compartment Login
The compartment login configuration enables users and administrators to login
directly to a compartment. It provides a mechanism to set controls on those users
that are allowed to login to a service running in a specified compartment or prevent
access to the system based on previously configured authorization information.
1.2 Documentation
Use the following documents in conjunction with each other when using HP-UX Security
Containment Extensions B.11.31.01.01:
• HP-UX Compartment Login using Secure Shell (SSH)
• HP-UX System Administrator's Guide: Security Management
1.1 Features 5