HP-UX Containers (SRP) A.03.01 Administrator's Guide

128
• Assigns the authorization hpux.SRPadmin-container_name to execute the container
master startup script /opt/hpsrp/bin/srp_rc in the container. This enables the
administrator to start up and shut down the container. The RBAC cmdprivadm add
command is used to perform this task.
Configuring an administrative user does not grant that user login or srp_su access to the
compartment.
C.3 The prm service
The prm service creates a new PRM group for a container. The srp command does not provide an
interface to add a container to an existing PRM group. To add a container to an existing PRM group,
use the procedure described in HP Process Resource Manager User's Guide, “Assigning secure
compartments to PRM groups.”
C.3.1 Configuration data
By default, the srp command creates a new PRM group using the container name as the PRM group
name.
By default, the PRM group information is stored in the /etc/prmconf file. You can change the
filename by running the srp_setup command, see srp_setup(1M). Refer to the HP Process
Resource Manager User Guide for more information about the system resource allocation.
C.4 The network service
The network service configures an IP interface for the container. You do not have to use a
dedicated network interface card for the container; you can create a logical IP interface on a network
interface card.
C.4.1 Configuration location
The srp command configures IP interface information for the HP-UX Transport subsystem, the
initialization and shutdown service, and for the container, as described in the following sections.
HP-UX transport
If you specify an IP address that is not already configured for the system, the srp command also
configures the IP interface information for the HP-UX Transport subsystem.
IPv4 address
If you specify an IPv4 address, the srp command adds configuration data to the
/etc/rc.config.d/netconf file.
If you specify a primary interface name, the srp command assigns the address to the primary
interface if the primary interface does not already have an IP address configured. If the primary
interface already has an IP address configured, the srp command creates a new secondary (logical)
interface using the next available IP index number for that primary interface. If you specify a
secondary interface name and the corresponding primary interface is not already configured, the srp
command displays an error message.
The srp command adds the interface to the /etc/rc.config.d/netconf file with the
INTERFACE_SKIP set to true and INTERFACE_STATE set to up. The interface is brought up
when the container is started.