xref: /illumos-gate/usr/src/cmd/cmd-inet/usr.sbin/shell.xml (revision 5422785d352a2bb398daceab3d1898a8aa64d006)
1<?xml version='1.0'?>
2<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>
3
4<!--
5 Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
6 Use is subject to license terms.
7
8 CDDL HEADER START
9
10 The contents of this file are subject to the terms of the
11 Common Development and Distribution License (the "License").
12 You may not use this file except in compliance with the License.
13
14 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
15 or http://www.opensolaris.org/os/licensing.
16 See the License for the specific language governing permissions
17 and limitations under the License.
18
19 When distributing Covered Code, include this CDDL HEADER in each
20 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
21 If applicable, add the following below this CDDL HEADER, with the
22 fields enclosed by brackets "[]" replaced with your own identifying
23 information: Portions Copyright [yyyy] [name of copyright owner]
24
25 CDDL HEADER END
26
27	NOTE:  This service manifest is not editable; its contents will
28	be overwritten by package or patch operations, including
29	operating system upgrade.  Make customizations in a different
30	file.
31
32	Service manifests for in.rshd.
33-->
34
35<service_bundle type='manifest' name='SUNWrcmdr:rsh'>
36
37<service
38	name='network/shell'
39	type='service'
40	version='1'>
41
42	<restarter>
43		<service_fmri value='svc:/network/inetd:default' />
44	</restarter>
45
46	<dependency
47		name='loopback'
48		grouping='require_any'
49		restart_on='error'
50		type='service'>
51		<service_fmri value='svc:/network/loopback' />
52	</dependency>
53
54	<dependency
55		name='network'
56		grouping='optional_all'
57		restart_on='error'
58		type='service'>
59		<service_fmri value='svc:/milestone/network' />
60	</dependency>
61
62	<!--
63	    The proto setting here of both tcp and tcp6only is required in order
64	    to prevent breaking applications which assume that the socket they
65	    are handed by rsh is of the AF_INET family.
66	-->
67	<property_group name='inetd' type='framework'>
68		<stability value='Evolving' />
69		<propval name='name' type='astring' value='shell' />
70		<propval name='endpoint_type' type='astring' value='stream' />
71		<propval name='wait' type='boolean' value='false' />
72		<propval name='isrpc' type='boolean' value='false' />
73		<property name='proto' type='astring' override='true'>
74			<astring_list>
75				<value_node value='tcp'/>
76				<value_node value='tcp6only'/>
77			</astring_list>
78		</property>
79	</property_group>
80
81	<instance name='default' enabled='false' >
82		<exec_method
83			type='method'
84			name='inetd_start'
85			exec='/usr/sbin/in.rshd'
86			timeout_seconds='0'>
87			<method_context>
88				<method_credential user='root' group='root' />
89			</method_context>
90		</exec_method>
91
92		<exec_method
93	    		type='method'
94	    		name='inetd_disable'
95	    		exec=':kill'
96	    		timeout_seconds='0'>
97		</exec_method>
98
99		<property_group name='firewall_config' type='com.sun,fw_configuration'>
100			<propval name='policy' type='astring' value='use_global' />
101			<propval name='apply_to' type='astring' value='' />
102			<propval name='exceptions' type='astring' value='' />
103			<propval name='value_authorization' type='astring'
104				value='solaris.smf.value.firewall.config' />
105		</property_group>
106
107		<template>
108			<common_name>
109				<loctext xml:lang='C'>
110					remote shell
111				</loctext>
112			</common_name>
113		</template>
114	</instance>
115
116	<!--
117	    RSH - with kerberos authentication (only works over IPv4)
118	-->
119	<instance name='kshell' enabled='false' >
120		<exec_method
121		    type='method'
122		    name='inetd_start'
123		    exec='/usr/sbin/in.rshd -kc'
124		    timeout_seconds='0'>
125		    <method_context>
126			<method_credential user='root' group='root' />
127		    </method_context>
128		</exec_method>
129
130		<exec_method
131		    type='method'
132		    name='inetd_disable'
133		    exec=':kill'
134		    timeout_seconds='0'>
135		</exec_method>
136
137		<property_group name='inetd' type='framework'>
138			<propval name='name' type='astring' value='kshell' />
139			<propval name='proto' type='astring' value='tcp' />
140		</property_group>
141
142		<property_group name='firewall_config' type='com.sun,fw_configuration'>
143			<propval name='policy' type='astring' value='use_global' />
144			<propval name='apply_to' type='astring' value='' />
145			<propval name='exceptions' type='astring' value='' />
146			<propval name='value_authorization' type='astring'
147				value='solaris.smf.value.firewall.config' />
148		</property_group>
149
150		<template>
151			<common_name>
152				<loctext xml:lang='C'>
153remote shell with Kerberos authentication
154				</loctext>
155			</common_name>
156		</template>
157	</instance>
158
159	<stability value='Unstable' />
160
161	<template>
162		<common_name>
163			<loctext xml:lang='C'>
164				rsh
165			</loctext>
166		</common_name>
167		<documentation>
168			<manpage title='in.rshd' section='1M'
169			    manpath='/usr/share/man' />
170			<manpage title='rshd' section='1M'
171			    manpath='/usr/share/man' />
172		</documentation>
173	</template>
174</service>
175
176</service_bundle>
177