HP-UX Mailing Solutions White Paper

Figure 23 Parent and Handler Processes in a Compartment
Running a Sendmail Process in a Compartment
Follow this procedure to run a Sendmail process in a compartment on an HP-UX system:
1. Check if the compartmentalization feature is already enabled on the system:
# cmpt_tune
Examining the kernel configuration. Please be patient.
Compartmentalization is disabled in running configuration.
2. If feature is disabled, enable the compartments feature:
# cmpt_tune –e
Enabling compartmentalization feature. Please wait.
WARNING: Interfaces are not assigned to any compartment.
/etc/cmpt/iface.rules file has been created for
this purpose. It is recommended that this file be used to
assign network interfaces to compartments.
If an interface is not assigned to any compartment, then
that interface becomes essentially useless.
NOTE: Interfaces can be configured such that they belong to a
compartment, yet accessible from other compartments.
Current contents of interface rules file:
compartment ifaces {
interface lan0
interface lan1
interface lan2
interface lan3
interface lan900
interface lan901
interface lan902
interface lan903
40