usr/src/cmd/cmd-inet/usr.sbin/ipsecutils/ipsecalgs.xml

   1 <?xml version="1.0"?>
   2 <!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
   3 <!--
   4         Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
   5         Use is subject to license terms.
   6
   7         Copyright (c) 2012 DEY Storage Systems, Inc.  All rights reserved.
   8
   9  CDDL HEADER START
  10
  11  The contents of this file are subject to the terms of the
  12  Common Development and Distribution License (the "License").
  13  You may not use this file except in compliance with the License.
  14
  15  You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  16  or http://www.opensolaris.org/os/licensing.
  17  See the License for the specific language governing permissions
  18  and limitations under the License.
  19
  20  When distributing Covered Code, include this CDDL HEADER in each
  21  file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  22  If applicable, add the following below this CDDL HEADER, with the
  23  fields enclosed by brackets "[]" replaced with your own identifying
  24  information: Portions Copyright [yyyy] [name of copyright owner]
  25
  26  CDDL HEADER END
  27
  28         NOTE:  This service manifest is not editable; its contents will
  29         be overwritten by package or patch operations, including
  30         operating system upgrade.  Make customizations in a different
  31         file.
  32 -->
  33 <service_bundle type='manifest' name='SUNWcsr:ipsecalgs'>
  34
  35 <service
  36         name='network/ipsec/ipsecalgs'
  37         type='service'
  38         version='1'>
  39
  40         <!-- The policy service depends on the 'ipsecalgs'
  41         service being enabled. -->
  42         <create_default_instance enabled='true' />
  43
  44         <single_instance />
  45
  46         <dependency
  47                 name='cryptosvc'
  48                 grouping='require_all'
  49                 restart_on='none'
  50                 type='service'>
  51                 <service_fmri value='svc:/system/cryptosvc' />
  52         </dependency>
  53
  54         <dependency
  55                 name='config_data'
  56                 grouping='require_all'
  57                 type='path'
  58                 restart_on='none'>
  59                 <service_fmri value='file://localhost/etc/inet/ipsecalgs' />
  60         </dependency>
  61
  62         <dependency
  63                 name='filesystem'
  64                 grouping='require_all'
  65                 type='service'
  66                 restart_on='error'>
  67                 <service_fmri value='svc:/system/filesystem/usr' />
  68         </dependency>
  69
  70         <dependency
  71                 name='devices'
  72                 grouping='require_all'
  73                 type='service'
  74                 restart_on='none'>
  75                 <service_fmri value='svc:/system/device/local' />
  76         </dependency>
  77
  78         <dependent
  79                 name='ipsecalgs-network'
  80                 grouping='optional_all'
  81                 restart_on='none'>
  82                 <service_fmri
  83                         value='svc:/milestone/network'
  84                 />
  85         </dependent>
  86
  87         <exec_method
  88                 type='method'
  89                 name='start'
  90                 exec='/usr/sbin/ipsecalgs -s'
  91                 timeout_seconds='60'
  92         />
  93
  94         <exec_method
  95                 type='method'
  96                 name='refresh'
  97                 exec='/usr/sbin/ipsecalgs -s'
  98                 timeout_seconds='60'
  99         />
 100
 101         <exec_method
 102                 type='method'
 103                 name='stop'
 104                 exec=':true'
 105                 timeout_seconds='3'
 106         />
 107
 108         <property_group name='general' type='framework'>
 109                 <!-- A user with this authorization can:
 110
 111                         svcadm restart ipsecalgs
 112                         svcadm refresh ipsecalgs
 113                         svcadm mark <state> ipsecalgs
 114                         svcadm clear ipsecalgs
 115
 116                 see auths(1) and user_attr(4)-->
 117
 118                 <propval
 119                         name='action_authorization'
 120                         type='astring'
 121                         value='solaris.smf.manage.ipsec'
 122                 />
 123                 <!-- A user with this authorization can:
 124
 125                         svcadm disable ipsecalgs
 126                         svcadm enable ipsecalgs
 127
 128                  see auths(1) and user_attr(4)-->
 129                 <propval
 130                         name='value_authorization'
 131                         type='astring'
 132                         value='solaris.smf.manage.ipsec'
 133                 />
 134         </property_group>
 135
 136         <property_group name='startd' type='framework'>
 137                 <propval
 138                         name='duration'
 139                         type='astring'
 140                         value='transient'
 141                 />
 142         </property_group>
 143
 144         <stability value='Unstable' />
 145
 146         <template>
 147                 <common_name>
 148                         <loctext xml:lang='C'>
 149                                 IPsec algorithm initialization
 150                         </loctext>
 151                 </common_name>
 152                 <description>
 153                         <loctext xml:lang='C'>
 154                                 IPsec algorithm configuration involves
 155                                 loading AH and ESP algorithm support.
 156                         </loctext>
 157                 </description>
 158                 <documentation>
 159                         <manpage
 160                                 title='ipsecalgs'
 161                                 section='1M'
 162                                 manpath='/usr/share/man'
 163                         />
 164                 </documentation>
 165         </template>
 166 </service>
 167 </service_bundle>