HP-UX Secure Resource Partitions (SRP) A.02.00 Administrator's Guide

Table of Contents
About This Document.......................................................................................................11
Intended Audience................................................................................................................................11
Typographic Conventions.....................................................................................................................11
Related Information..............................................................................................................................12
Publishing History................................................................................................................................12
HP Encourages Your Comments..........................................................................................................12
1 Introduction...................................................................................................................13
Product Overview.................................................................................................................................13
Securing SRP Compartments..........................................................................................................14
Subsystems Configured by SRP......................................................................................................14
HP-UX Security Containment....................................................................................................14
HP Process Resource Manager (PRM)............................................................................................15
IP Interfaces.....................................................................................................................................15
Initialization and Shutdown Services..............................................................................................16
HP-UX IPFilter.................................................................................................................................16
HP-UX IPSec....................................................................................................................................16
SRP Components..................................................................................................................................16
The srp_setup Utility...................................................................................................................16
The srp Utility................................................................................................................................16
SRP Templates and Services............................................................................................................17
Templates...................................................................................................................................17
Services.......................................................................................................................................17
Configuration Synchronization Manager (CMGR) Utility and Libraries.......................................18
Planning Considerations and Best Practices.........................................................................................18
Compatibility with Other Partitioning Continuum Products.........................................................18
Coexistence with the INIT Compartment......................................................................................18
Using the INIT Compartment...................................................................................................19
Address Collisions with INADDR_ANY and IN6ADDR_ANY Sockets in the INIT
Compartment.............................................................................................................................19
Address Collisions with sshd Daemons..............................................................................19
Best Practice Recommendations.................................................................................................19
Cross-Compartment Network Traffic..............................................................................................20
IP Routers and Strong End System (ES) Model...............................................................................20
Application Gateway Servers.....................................................................................................20
Compartment Login and Access for Non-root Users......................................................................20
SRP Compartment Administrators and Login Group....................................................................21
Planning Considerations............................................................................................................21
Compartment Home Directories (/var/hpsrp)............................................................................21
Planning Considerations............................................................................................................21
Concurrent Access of System and Subsystem Configuration Files................................................21
Compatibility with the Bastille Revert Feature...............................................................................22
Compatibility with PRM SRP Commands......................................................................................22
Compatibility with Serviceguard....................................................................................................22
2 Installing SRP................................................................................................................23
System and Environment Requirements..............................................................................................23
Installing the HP-UX SRP Bundle.........................................................................................................23
Verifying the HP-UX Configuration Synchronization Manager Installation.......................................23
Table of Contents 3