HP-UX Containers (SRP) A.03.00 Administrator's Guide

104
17 Compatibility with other HP-UX products
17.1 Bastille revert feature
Bastille provides the ability to save and restore a baseline configuration of an HP-UX system. If you
use the bastille -r command to revert to the Bastille baseline configuration, you can lose any
IPFilter rules configured using HP-UX Containers that are not in the baseline configuration. HP
recommends that you do not configure the IPFilter service with HP-UX Containers if you are using
Bastille to manage IPFilter rules. If Bastille is managing IPFilter rules, the /etc/opt/ipf/ipf.conf
or /etc/opt/ipf/ipf.conf file contains a statement similar to the following:
# WARNING: This file was generated automatically and will be replaced
# the next time you run Bastille. DO NOT EDIT IT DIRECTLY!!!
17.2 PRM HP-UX Containers commands
The HP PRM product includes the following commands to associate a Security Containment
compartment with a PRM group:
• prm2scomp
• scomp2prm
• srpgen
HP requires that you use the srp command, instead of the PRM commands listed above, to create or
modify the Security Containment compartment and PRM group configuration associated with an
HP-UX container. Security Containment compartments created with the above commands will not work
as HP-UX Containers but may coexist with HP-UX Containers on the same system.
17.3 Configuration Synchronization Manager (CMGR) utility and
libraries
The Configuration Synchronization Manager (CMGR) product is included in the HP-UX-SRP bundle.
The CMGR product includes the cmgr utility and libraries, which enables the srp command to
coordinate the configuration of multiple subsystems. The srp command invokes the cmgr utility.
For more information about CMGR, refer to the
HP-UX CMGR Administrator's and Developer's Guide.