xref: /illumos-gate/usr/src/cmd/cmd-inet/usr.sbin/ipsecutils/ipsecalgs.xml (revision 45ede40b2394db7967e59f19288fae9b62efd4aa)
1<?xml version="1.0"?>
2<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
3<!--
4	Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
5	Use is subject to license terms.
6
7	Copyright (c) 2012 DEY Storage Systems, Inc.  All rights reserved.
8
9 CDDL HEADER START
10
11 The contents of this file are subject to the terms of the
12 Common Development and Distribution License (the "License").
13 You may not use this file except in compliance with the License.
14
15 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
16 or http://www.opensolaris.org/os/licensing.
17 See the License for the specific language governing permissions
18 and limitations under the License.
19
20 When distributing Covered Code, include this CDDL HEADER in each
21 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
22 If applicable, add the following below this CDDL HEADER, with the
23 fields enclosed by brackets "[]" replaced with your own identifying
24 information: Portions Copyright [yyyy] [name of copyright owner]
25
26 CDDL HEADER END
27
28	NOTE:  This service manifest is not editable; its contents will
29	be overwritten by package or patch operations, including
30	operating system upgrade.  Make customizations in a different
31	file.
32-->
33<service_bundle type='manifest' name='SUNWcsr:ipsecalgs'>
34
35<service
36	name='network/ipsec/ipsecalgs'
37	type='service'
38	version='1'>
39
40	<!-- The policy service depends on the 'ipsecalgs'
41	service being enabled. -->
42	<create_default_instance enabled='true' />
43
44	<single_instance />
45
46	<dependency
47		name='cryptosvc'
48		grouping='require_all'
49		restart_on='none'
50		type='service'>
51		<service_fmri value='svc:/system/cryptosvc' />
52	</dependency>
53
54        <dependency
55                name='config_data'
56                grouping='require_all'
57                type='path'
58		restart_on='none'>
59                <service_fmri value='file://localhost/etc/inet/ipsecalgs' />
60        </dependency>
61
62	<dependency
63		name='filesystem'
64		grouping='require_all'
65		type='service'
66		restart_on='error'>
67		<service_fmri value='svc:/system/filesystem/usr' />
68	</dependency>
69
70	<dependency
71		name='devices'
72		grouping='require_all'
73		type='service'
74		restart_on='none'>
75		<service_fmri value='svc:/system/device/local' />
76	</dependency>
77
78	<dependent
79		name='ipsecalgs-network'
80		grouping='optional_all'
81		restart_on='none'>
82		<service_fmri
83			value='svc:/milestone/network'
84		/>
85	</dependent>
86
87	<exec_method
88		type='method'
89		name='start'
90		exec='/usr/sbin/ipsecalgs -s'
91		timeout_seconds='60'
92	/>
93
94	<exec_method
95		type='method'
96		name='refresh'
97		exec='/usr/sbin/ipsecalgs -s'
98		timeout_seconds='60'
99	/>
100
101	<exec_method
102		type='method'
103		name='stop'
104		exec=':true'
105		timeout_seconds='3'
106	/>
107
108	<property_group name='general' type='framework'>
109		<!-- A user with this authorization can:
110
111			svcadm restart ipsecalgs
112			svcadm refresh ipsecalgs
113			svcadm mark <state> ipsecalgs
114			svcadm clear ipsecalgs
115
116		see auths(1) and user_attr(4)-->
117
118		<propval
119			name='action_authorization'
120			type='astring'
121			value='solaris.smf.manage.ipsec'
122		/>
123		<!-- A user with this authorization can:
124
125			svcadm disable ipsecalgs
126			svcadm enable ipsecalgs
127
128		 see auths(1) and user_attr(4)-->
129		<propval
130			name='value_authorization'
131			type='astring'
132			value='solaris.smf.manage.ipsec'
133		/>
134	</property_group>
135
136	<property_group name='startd' type='framework'>
137		<propval
138			name='duration'
139			type='astring'
140			value='transient'
141		/>
142	</property_group>
143
144	<stability value='Unstable' />
145
146	<template>
147		<common_name>
148			<loctext xml:lang='C'>
149				IPsec algorithm initialization
150			</loctext>
151		</common_name>
152		<description>
153			<loctext xml:lang='C'>
154				IPsec algorithm configuration involves
155				loading AH and ESP algorithm support.
156			</loctext>
157		</description>
158		<documentation>
159			<manpage
160				title='ipsecalgs'
161				section='1M'
162				manpath='/usr/share/man'
163			/>
164		</documentation>
165	</template>
166</service>
167</service_bundle>
168