HP-UX Secure Resource Partitions (SRP) A.02.00 Administrator's Guide

# /opt/hpsrp/bin/srp -a myCmpt -t sshd -s cmpt,provision

Enter the requested values when prompted, then press return.

Enter "?" for help at prompt. Press control-c to exit.

sshd data path: [/var/hpsrp/myCmpt/opt/ssh] RETURN

sshd executable path: [/opt/ssh] RETURN

Copy SSH config data from path: [/opt/ssh/newconfig] RETURN

sshd port number: [22] RETURN

Press return or enter "yes" to make the selected modifications with these

values. Do you wish to continue? [yes]

add compartment rules succeeded

add provision service succeeded

Step 6: Listing the Configuration Data for the sshd Template

To list the data configured for the sshd template, enter the following command:

srp -list compartment_name -v -t sshd

The srp utility lists the compartment rules and added for the sshd template. To view all the

configuration data for the compartment, omit the -t sshd argument.

The output for this example is as follows:

# /opt/hpsrp/bin/srp -l myCmpt -v -t sshd

Compartment: myCmpt Template: sshd Service: cmpt

----------------------------------------------------------------------

Compartment Configuration (/etc/cmpt/myCmpt.rules):

@tag-start compartment="myCmpt" template="sshd" service="cmpt" id="1" ;

// allow access to the shared sshd files

perm nsearch /opt

perm nsearch /opt/ssh

perm nsearch,read /opt/ssh

perm nsearch /var

perm nsearch /var/hpsrp

perm nsearch /var/hpsrp/myCmpt

perm nsearch /var/hpsrp/myCmpt/opt

perm nsearch /var/hpsrp/myCmpt/opt/ssh

perm all /var/hpsrp/myCmpt/opt/ssh

// add shared rules from the include file at "/opt/hpsrp/etc/cmpt/sshd.srp_incl"

#include "/opt/hpsrp/etc/cmpt/sshd.srp_incl"

Compartment: myCmpt Template: sshd Service: provision

----------------------------------------------------------------------

SSHD Configuration File:

/var/hpsrp/myCmpt/opt/ssh/sshd_config

SSHD Port:

SSHD Key Files:

/var/hpsrp/myCmpt/opt/ssh/ssh_host_rsa_key

/var/hpsrp/myCmpt/opt/ssh/ssh_host_rsa_key.pub

/var/hpsrp/myCmpt/opt/ssh/ssh_host_dsa_key

32 Getting Started with SRP