container_system.5 (2011 09)

CONTAINER_SYSTEM(5) CONTAINER_SYSTEM(5)
FSS, FSSTHREAD
Allows a process or thread to configure fair share scheduler.
MKNOD
Allows a process to create character or block special files. Example: mknod(1M)
MPCTL
Allows a process to change processor binding, locality domain binding, or launch policy of a process.
NETADMIN
Allows a process to perform network administrative operations such as configuring
IP address and routing
tables. Example: Add, delete, update options of ifconfig(1M), netstat (1M), route(1M)
NETPROMISCUOUS
Allows a process to configure an interface to listen in promiscuous mode. Example: tcpdump
PSET
Allows change to the system pset configuration.
RDEVOPS
Allows a process to do device specific administrative operations such as tape or disk formatting.
REBOOT
Allows a process to perform system reboot. Example: reboot(1M)
RULESCONFIG
Allows a process to add and modify compartment rules. Example: setrules(1M)
SPUCTL
Allows a process to perform certain administrative operations in the Instant Capacity product.
SWAPCTL
Allows a process to manage and configure system swap space. Example: swapctl(2), swapon(1M)
SYSNFS
Allows a process to export a file system.
TRIALMODE
Allows a process to log privileges required to execute in the syslog file.
MANAGING SYSTEM CONTAINERS
System containers can be created, modified, deleted, and migrated or cloned across systems via the
srp(1M) command. System containers can be started and stopped in a similar manner to starting and
stopping an individual system, including startup and shutdown processing. See sys_sys(1M), srp(1M),
srp_init(1M) and srp_allowed_product(1M).
RESTRICTIONS
All users in a system container (including root) are prevented from performing the following list of admin-
istrative tasks. These administrative tasks must be performed in the global view. Performing these
administrative tasks in a system container will return an error (e.g. permission denied).
• Kernel configuration management
• Kernel tunable management
• System boot configuration
• Reading kernel memory
• Make kernel
• System crash configuration
• Kernel Registry Services (
KRS)
•
DLKM management
• Creating device files
• Changing system time
• Shutdown/reboot the physical system
• Swap space management
HP-UX 11i Version 3: September 2011 − 3 − Hewlett-Packard Company 3