HP-UX Secure Resource Partitions (SRP) A.02.02 Administrator's Guide

58
Variable Name: wss_version.
Default: 3.0.
Tomcat data path
The root directory for Tomcat data. The cmpt
service adds rules to allow the
compartment all access to this directory. Users and processes in the SRP
compartment can read, write, traverse (nsearch), and delete (ulink) the
contents of these directories.
Variable Name: data_path.
Default: /var/hpsrp/srp_name/opt/hpws22/tomcat.
Tomcat executable
path
The root directory for Tomcat executables. The cmpt service adds rules to
allow the compartment read access to this directory.
Variable Name: exec_path.
Default: /opt/hpws22/tomcat.
Java Home Path
The java home path
Variable Name: java_path
Default:
/opt/java1.5
10.1.1.2 Configuration Data
SRP adds entries to the SRP compartment rules file (/etc/cmpt/srp_name.rules) that authorize
access to the exec_path, data_path, and java_path directories. SRP also adds an include
statement to add the rules from the /opt/hpsrp/etc/cmpt/tomcat.srp_incl file. As delivered
by HP, this file is empty. You can edit this file to contain compartment rules to be applied when
configuring the cmpt service with the tomcat template.
10.1.2 The ipfilter Service
The ipfilter service for the tomcat template adds rules to allow inbound requests to the specified
ports used by the Tomcat server to pass. You can also specify additional inbound destination TCP port
numbers for IPFilter pass rules.
10.1.2.1 Input Data
SRP prompts for the following data. You can also specify a variable name and value in the command
line, as described in 15.1 Creating an SRP Compartment or Adding Data to an SRP.
Tomcat Control
port
Specifies the TCP port number on which the compartment Tomcat server will
receive request from an Apache webserver.
Variable Name: control_port.
Valid Input: A TCP port number in the range 1- 65535.
Default: 8005
Tomcat HTTP port
number
Specifies the TCP port number on which the compartment Tomcat server will
receive HTTP requests for servlets.
Variable Name: http_port.
Valid Input: A TCP port number in the range 1- 65535.
Default: 8081.
Tomcat AJP port
number
Specifies the TCP port number on which the compartment Tomcat server will
receive request from an Apache webserver.
Variable Name: ajp_port.