HP-UX Secure Resource Partitions (SRP) A.02.00 Administrator's Guide

Initialization and Shutdown Services
You can use SRP to create an initialization and shutdown directory structure for the compartment
with compartment control scripts that are automatically executed when the system starts up or
shuts down. You can also manually start or shut down an SRP compartment using the srp utility.
HP-UX IPFilter
HP-UX IPFilter is a host-based firewall software solution that enables you to restrict network
traffic according to packet attributes, such as:
• Source IP address
• Destination IP address
• Protocol (such as TCP or UDP)
• TCP and UDP port numbers
HP-UX IPSec
HP-UX IPSec enables you to secure IP packets by encrypting and authenticating IP data. You
configure IPSec to select packets for security according to packet attributes, such as:
• Source IP address
• Destination IP address
• Protocol (such as TCP or UDP)
• TCP and UDP port numbers
SRP Components
SRP includes the following components:
• The srp_setup utility
• The srp utility
• SRP templates, which manage configuration data for services
• The Configuration Synchronization Manager (CMGR) utility and libraries
The srp_setup Utility
The /opt/hpsrp/bin/srp_setup utility checks the status of the subsystems that SRP can
configure. If a subsystem is not enabled, srp_setup prompts if you want to enable it. The
srp_setup utility also prompts for subsystem startup data such as configuration directories
and autostart parameters.
The srp Utility
The /opt/hpsrp/bin/srp utility is an interactive program that prompts you for information
and creates an SRP compartment by configuring the subsystems listed in “Subsystems Configured
by SRP” (page 14). The input parameters and configuration data created is determined by the
templates and services you use with srp, as described in the specific chapter for each template.
The srp utility supports options to perform the following tasks:
• Creating an SRP compartment or adding data to an existing SRP compartment
• Displaying help information, including information about input parameters
• Listing the SRP compartment names and configuration data
• Replacing configuration information for an existing SRP compartment
• Deleting configuration information for an existing SRP compartment
• Starting up or shutting down an SRP compartment
• Running in batch (non-interactive) mode
• Backing up and restoring SRP configuration data
16 Introduction