HP-UX Containers (SRP) A.03.00 Release Notes

SYSNFS

Allows a process to export a file system.

TRIALMODE

Allows a process to log privileges required to execute in the syslog file.

1.8.3 Disallowed commands in system containers

The commands and system calls that fall into the category of disallowed operations covered in 1.8.1

Disallowed operations in system containers will fail in a system container. The disallowed operations

can be part of a command (certain options) or can be the command itself. Some examples of the

disallowed commands are: accton(1M); acctsh(1M); date(1) –u, -a; getprivgrp(1M);

ied(1); mknod(1M); mpsched(1); privgrp(4); psrset(1M); ptydaemon; reboot(1M);

sar(1M), setboot(1M); setprivgrp(1M); setuname(1M) –s; shl(1); timex(1) –o, -p;

umodem(1); uupath(1); who(1) –A, -t

1.8.4 Restricted shared files in system containers

System containers support two filesystem types. System containers configured with the private

filesystem subtype share the /stand directory with the global view. System containers configured

with the shared filesystem subtype share the /stand, /usr, and /sbin directories with the global

view. (The /stand directory is primarily used for kernel configuration files, whereas /usr and

/sbin directories are primarily used for system commands and libraries.) These shared directories

are read-only protected from access by processes running in system containers to prevent

modifications to shared files that reside in the global view.

1.8.5 Restricted HP products in system containers

There are some HP products that cannot be installed in system containers because they can lead to

incorrect or inconsistent behavior in a system container. A list of HP products that will not work in a

system container has been constructed. The HP-UX Containers A.03.00 product consults this list

during the SD software installation and disallows the installation of any products on this list.

1.8.6 Features not supported in system containers

The followings features are not supported in system containers:

• POSIX IPC objects namespace is not supported.

• The interface statfsdev(3C) and the command fstyp(1M) will not work for the devices

which are accessible within a system container.

• HP-UX Boot authentication feature is not supported in system containers. Setting BOOT_AUTH

or BOOT_USERS parameters in the container local /etc/default/security file have

no effect.

• NFS server, CacheFS, CIFS client, and CFSM products are not supported in system

containers.

• The HP-UX Accounting product is not supported in system containers.

1.9 Known problems in HP-UX Containers A.03.00

The followings are known problems:

• The srp_su command does not initialize the TZ environment variable correctly

when the ‘-‘ option is omitted. Executing the srp_su(1M) command without the '-'

option does not update the TZ environment variable for the command or session in the

container based on the container /etc/TIMEZONE variable. The command or session uses

the TZ value set in the global view.