HP-UX Secure Resource Partitions (SRP) A.02.02 Administrator's Guide

init (compartment startup and shutdown scripts) [y] RETURN

network (IP address and network interface management [y] RETURN

prm (Process Resource Management) [y] RETURN

ipfilter (ipfilter host firewall rules) [n] RETURN

ipsec (ipsec secure transport rules) [n] RETURN

provision (run customizable provision script) [y] RETURN

Selected SRP service(s) are: cmpt,admin,init,login,network,prm,provision

Would you like to save the changes? [y] RETURN

Saving SRP default template ... [ OK ]

##############################

# Compartment Setup

##############################

Checking the Compartment module ... [ Enabled ]

##############################

# cmpt Login configuration

##############################

Checking Compartment Login Configuration File... [ OK ]

Checking cmpt login feature ... [ Enabled ]

Note: By default, once compartment login is enabled, only the root user

(user name of "root") will be allowed to login to the INIT compartment.

To enable additional users, execute the following command:

roleadm assign <user_name> SRPlogin-init

Adding RBAC role (SRPlogin-init) for INIT cmpt login ... [ OK ]

Any service monitored by pam_hpsec account management module is enabled

with compartment login enabled.

The current PAM configuration file (/etc/pam.conf) is the same as the

system default PAM configuration file (/usr/newconfig/etc/pam.conf).

You can keep it for compartment login purpose.

##############################

# PRM Setup

##############################

Checking PRM installation ... [ OK ]

Enter PRM configuration file [/etc/prmconf] RETURN

Saving SRP default template ... [ OK ]

Checking PRM Memory record for OTHERS group ... [ OK ]

Checking PRM starts at boot-up ... [ Enabled ]