Print this page
12071 clarify implementation of single_instance in SMF services
Reviewed by: Robert Mustacchi <rm@fingolfin.org>
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/cmd/svc/milestone/global.xml
+++ new/usr/src/cmd/svc/milestone/global.xml
1 1 <?xml version="1.0"?>
2 2 <!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
3 3 <!--
4 4 Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
5 5 Copyright 2016 Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
6 + Copyright 2019 Joyent, Inc.
6 7
7 8 CDDL HEADER START
8 9
9 10 The contents of this file are subject to the terms of the
10 11 Common Development and Distribution License (the "License").
11 12 You may not use this file except in compliance with the License.
12 13
13 14 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
14 15 or http://www.opensolaris.org/os/licensing.
15 16 See the License for the specific language governing permissions
16 17 and limitations under the License.
17 18
18 19 When distributing Covered Code, include this CDDL HEADER in each
19 20 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
20 21 If applicable, add the following below this CDDL HEADER, with the
21 22 fields enclosed by brackets "[]" replaced with your own identifying
22 23 information: Portions Copyright [yyyy] [name of copyright owner]
23 24
24 25 CDDL HEADER END
25 26
26 27 NOTE: This service manifest is not editable; its contents will
27 28 be overwritten by package or patch operations, including
28 29 operating system upgrade. Make customizations in a different
29 30 file.
30 31 -->
31 32
32 33 <service_bundle type='manifest' name='SUNWcsr:global'>
33 34
34 35 <service
35 36 name='system/svc/global'
36 37 type='service'
37 38 version='1'>
38 39
39 40 <!--
40 41 There's no running configuration to manage here. However,
41 42 this service stores the system-wide definitions for
42 43 templates.
43 44 -->
44 45
45 46 <create_default_instance enabled='false' />
46 47
47 48 <single_instance/>
48 49
49 50 <exec_method
50 51 type='method'
51 52 name='start'
52 53 exec=':true'
53 54 timeout_seconds='0' />
54 55
55 56 <exec_method
56 57 type='method'
57 58 name='stop'
58 59 exec=':true'
59 60 timeout_seconds='0' />
60 61
61 62 <stability value='Unstable' />
62 63
63 64 <template>
64 65 <common_name>
65 66 <loctext xml:lang='C'>
66 67 system-wide configuration definitions
67 68 </loctext>
68 69 </common_name>
69 70 <documentation>
70 71 <manpage title='smf' section='5'
71 72 manpath='/usr/share/man' />
72 73 <manpage title='smf_template' section='5'
73 74 manpath='/usr/share/man' />
74 75 </documentation>
75 76
76 77 <pg_pattern name='general' type='framework'
77 78 target='all' required='true'>
78 79 <description>
79 80 <loctext xml:lang='C'>
80 81 Basic information about a service instance which is supplied by the service author, sometimes modified by the administrator, and consumed by SMF and the service's restarter.
81 82 </loctext>
82 83 </description>
83 84 <prop_pattern name='enabled' type='boolean'
84 85 required='true'>
85 86 <description>
86 87 <loctext xml:lang='C'>
87 88 The service instance is expected to be started once all of its dependencies are satisfied. If this property is not defined, the restarter will not be notified about this service instance.
88 89 </loctext>
89 90 </description>
90 91 <cardinality min='1' max='1'/>
91 92 </prop_pattern>
92 93 <prop_pattern name='restarter' type='fmri'
93 94 required='false'>
94 95 <description>
|
↓ open down ↓ |
79 lines elided |
↑ open up ↑ |
95 96 <loctext xml:lang='C'>
96 97 The restarter responsible for managing this service instance. If the property is unset, the default restarter, svc.startd, is assumed.
97 98 </loctext>
98 99 </description>
99 100 <cardinality min='1' max='1'/>
100 101 </prop_pattern>
101 102 <prop_pattern name='single_instance' type='boolean'
102 103 required='false'>
103 104 <description>
104 105 <loctext xml:lang='C'>
105 -Only one instance of this service may be run. This property is currently unenforced, but will be at some point in the future.
106 +Only one instance of this service may be run. This behavior is unimplemented, and obsolete.
106 107 </loctext>
107 108 </description>
108 109 <cardinality min='1' max='1'/>
109 110 </prop_pattern>
110 111 </pg_pattern>
111 112
112 113 <pg_pattern type='dependency' target='all' required='false'>
113 114 <description>
114 115 <loctext xml:lang='C'>
115 116 A dependency declares a required condition for a service instance to start or stay running. It is defined by the service author and consumed by SMF.
116 117 </loctext>
117 118 </description>
118 119 <prop_pattern name='entities' type='fmri'
119 120 required='true'>
120 121 <description>
121 122 <loctext xml:lang='C'>
122 123 The services, service instances, or files used to calculate this dependency.
123 124 </loctext>
124 125 </description>
125 126 <cardinality min='1'/>
126 127 </prop_pattern>
127 128 <prop_pattern name='external' type='boolean'>
128 129 <description>
129 130 <loctext xml:lang='C'>
130 131 This dependency was declared by the service defined in entities. It will be removed only when that service is deleted.
131 132 </loctext>
132 133 </description>
133 134 <visibility value='readonly'/>
134 135 <cardinality min='1' max='1'/>
135 136 </prop_pattern>
136 137 <prop_pattern name='grouping' type='astring'
137 138 required='true'>
138 139 <description>
139 140 <loctext xml:lang='C'>
140 141 How to decide whether this dependency is satisfied.
141 142 </loctext>
142 143 </description>
143 144 <cardinality min='1' max='1'/>
144 145 <constraints>
145 146 <value name='require_all'>
146 147 <description>
147 148 <loctext xml:lang='C'>
148 149 Satisfied when all cited services are running (online or degraded), or when all indicated files are present.
149 150 </loctext>
150 151 </description>
151 152 </value>
152 153 <value name='require_any'>
153 154 <description>
154 155 <loctext xml:lang='C'>
155 156 Satisfied when one of the cited services is running (online or degraded), or when at least one of the indicated files is present.
156 157 </loctext>
157 158 </description>
158 159 </value>
159 160 <value name='optional_all'>
160 161 <description>
161 162 <loctext xml:lang='C'>
162 163 Satisfied if the cited services are running (online or degraded) or will not run without administrative action (disabled, maintenance, not present, or offline waiting for dependencies which will not start without administrative action).
163 164
164 165 </loctext>
165 166 </description>
166 167 </value>
167 168 <value name='exclude_all'>
168 169 <description>
169 170 <loctext xml:lang='C'>
170 171 Satisfied when all of the cited services are disabled, in the maintenance state, or when cited services or files are not present.
171 172 </loctext>
172 173 </description>
173 174 </value>
174 175 </constraints>
175 176 <choices>
176 177 <include_values type='constraints'/>
177 178 </choices>
178 179 </prop_pattern>
179 180 <prop_pattern name='restart_on' type='astring'
180 181 required='true'>
181 182 <description>
182 183 <loctext xml:lang='C'>
183 184 Determines whether to restart the service due to a dependency refresh, restart, or failure.
184 185 </loctext>
185 186 </description>
186 187 <cardinality min='1' max='1'/>
187 188 <constraints>
188 189 <value name='none'>
189 190 <description>
190 191 <loctext xml:lang='C'>
191 192 Never restart due to dependency refresh, restart, or failure.
192 193 </loctext>
193 194 </description>
194 195 </value>
195 196 <value name='error'>
196 197 <description>
197 198 <loctext xml:lang='C'>
198 199 Restart only if the dependency encounters an error, such as an uncorrectable hardware error, or a software error such as a core dump.
199 200 </loctext>
200 201 </description>
201 202 </value>
202 203 <value name='restart'>
203 204 <description>
204 205 <loctext xml:lang='C'>
205 206 Restart if the dependency encounters an error or is explicitly restarted.
206 207 </loctext>
207 208 </description>
208 209 </value>
209 210 <value name='refresh'>
210 211 <description>
211 212 <loctext xml:lang='C'>
212 213 Restart if the dependency encounters an error, is explicitly restarted, or explicitly refreshed.
213 214 </loctext>
214 215 </description>
215 216 </value>
216 217 </constraints>
217 218 <choices>
218 219 <include_values type='constraints'/>
219 220 </choices>
220 221 </prop_pattern>
221 222 <prop_pattern name='type' type='astring'
222 223 required='true'>
223 224 <description>
224 225 <loctext xml:lang='C'>
225 226 The type of the dependency: service or file.
226 227 </loctext>
227 228 </description>
228 229 <cardinality min='1' max='1'/>
229 230 <constraints>
230 231 <value name='service'>
231 232 <description>
232 233 <loctext xml:lang='C'>
233 234 Depend on services or instances.
234 235 </loctext>
235 236 </description>
236 237 </value>
237 238 <value name='path'>
238 239 <description>
239 240 <loctext xml:lang='C'>
240 241 Depend on the existance of a file path.
241 242 </loctext>
242 243 </description>
243 244 </value>
244 245 </constraints>
245 246 <choices>
246 247 <include_values type='constraints'/>
247 248 </choices>
248 249 </prop_pattern>
249 250 </pg_pattern>
250 251
251 252 <pg_pattern type='template_pg_pattern' target='all'
252 253 required='false'>
253 254 <description>
254 255 <loctext xml:lang='C'>
255 256 Template data about property groups. This information is provided in the manifest by the service author and should not be modified directly.
256 257 </loctext>
257 258 </description>
258 259
259 260 <prop_pattern name='name' type='astring'
260 261 required='false'>
261 262 <description>
262 263 <loctext xml:lang='C'>
263 264 Optional name of a property group which is described by this template. No name means the name is wildcarded.
264 265 </loctext>
265 266 </description>
266 267 <visibility value='hidden'/>
267 268 <cardinality min='1' max='1'/>
268 269 </prop_pattern>
269 270 <prop_pattern name='type' type='astring'
270 271 required='false'>
271 272 <description>
272 273 <loctext xml:lang='C'>
273 274 Optional type of property groups which are described by this template. No type means that the type is wildcarded.
274 275 </loctext>
275 276 </description>
276 277 <visibility value='hidden'/>
277 278 <cardinality min='1' max='1'/>
278 279 </prop_pattern>
279 280 <prop_pattern name='required' type='boolean'
280 281 required='false'>
281 282 <description>
282 283 <loctext xml:lang='C'>
283 284 If true, entities without a property group which matches this pattern are considered invalid.
284 285 </loctext>
285 286 </description>
286 287 <visibility value='hidden'/>
287 288 <cardinality min='1' max='1'/>
288 289 </prop_pattern>
289 290 <prop_pattern name='target' type='astring'
290 291 required='false'>
291 292 <description>
292 293 <loctext xml:lang='C'>
293 294 The services or service instances to which this template should be applied.
294 295 </loctext>
295 296 </description>
296 297 <visibility value='hidden'/>
297 298 <cardinality min='1' max='1'/>
298 299 <constraints>
299 300 <value name='this'>
300 301 <description>
301 302 <loctext xml:lang='C'>
302 303 The service or instance on which the property group resides.
303 304 </loctext>
304 305 </description>
305 306 </value>
306 307 <value name='instance'>
307 308 <description>
308 309 <loctext xml:lang='C'>
309 310 This instance, or any instance of this service.
310 311 </loctext>
311 312 </description>
312 313 </value>
313 314 <value name='delegate'>
314 315 <description>
315 316 <loctext xml:lang='C'>
316 317 All instances which currently define this service as their restarter.
317 318 </loctext>
318 319 </description>
319 320 </value>
320 321 <value name='all'>
321 322 <description>
322 323 <loctext xml:lang='C'>
323 324 All services and instances on the system. "all" may only be set on the global service.
324 325 </loctext>
325 326 </description>
326 327 </value>
327 328 </constraints>
328 329 </prop_pattern>
329 330 </pg_pattern>
330 331
331 332 <pg_pattern type='template_prop_pattern' target='all'
332 333 required='false'>
333 334 <description>
334 335 <loctext xml:lang='C'>
335 336 Template data about properties. This information is provided in the manifest by the service author and should not be modified directly.
336 337 </loctext>
337 338 </description>
338 339 <prop_pattern name='name' type='astring'
339 340 required='true'>
340 341 <description>
341 342 <loctext xml:lang='C'>
342 343 Name of property this template applies to.
343 344 </loctext>
344 345 </description>
345 346 <visibility value='hidden'/>
346 347 <cardinality min='1' max='1'/>
347 348 </prop_pattern>
348 349 <prop_pattern name='pg_pattern' type='astring'
349 350 required='true'>
350 351 <description>
351 352 <loctext xml:lang='C'>
352 353 Name of property group that describes the enclosing property group pattern.
353 354 </loctext>
354 355 </description>
355 356 <visibility value='hidden'/>
356 357 <cardinality min='1' max='1'/>
357 358 </prop_pattern>
358 359 <prop_pattern name='required' type='boolean'
359 360 required='false'>
360 361 <description>
361 362 <loctext xml:lang='C'>
362 363 Defines whether a property matched by this template is required.
363 364 </loctext>
364 365 </description>
365 366 <visibility value='hidden'/>
366 367 <cardinality min='1' max='1'/>
367 368 </prop_pattern>
368 369 <prop_pattern name='type' type='astring'
369 370 required='false'>
370 371 <description>
371 372 <loctext xml:lang='C'>
372 373 The type that a property which this template refers to should be.
373 374 </loctext>
374 375 </description>
375 376 <visibility value='hidden'/>
376 377 <cardinality min='1' max='1'/>
377 378 </prop_pattern>
378 379 <prop_pattern name='visibility' type='astring'
379 380 required='false'>
380 381 <description>
381 382 <loctext xml:lang='C'>
382 383 The visibility of this property, which is readwrite by default. Visibility is only a cue to the user interface, and will not be explicitly enforced by SMF.
383 384 </loctext>
384 385 </description>
385 386 <visibility value='hidden'/>
386 387 <cardinality min='1' max='1'/>
387 388 <constraints>
388 389 <value name='hidden'>
389 390 <description>
390 391 <loctext xml:lang='C'>
391 392 Hidden in default user interface views.
392 393 </loctext>
393 394 </description>
394 395 </value>
395 396 <value name='readonly'>
396 397 <description>
397 398 <loctext xml:lang='C'>
398 399 Expected to be read only in most user interfaces.
399 400 </loctext>
400 401 </description>
401 402 </value>
402 403 <value name='readwrite'>
403 404 <description>
404 405 <loctext xml:lang='C'>
405 406 Expected to be manipulated in many user interfaces.
406 407 </loctext>
407 408 </description>
408 409 </value>
409 410 </constraints>
410 411 </prop_pattern>
411 412 <prop_pattern name='cardinality_min' type='count'
412 413 required='false'>
413 414 <description>
414 415 <loctext xml:lang='C'>
415 416 Minimum number of required values.
416 417 </loctext>
417 418 </description>
418 419 <cardinality min='1' max='1'/>
419 420 </prop_pattern>
420 421 <prop_pattern name='cardinality_max' type='count'
421 422 required='false'>
422 423 <description>
423 424 <loctext xml:lang='C'>
424 425 Maximum number of required values.
425 426 </loctext>
426 427 </description>
427 428 <visibility value='hidden'/>
428 429 <cardinality min='1' max='1'/>
429 430 </prop_pattern>
430 431 <prop_pattern name='internal_separators' type='astring'
431 432 required='false'>
432 433 <description>
433 434 <loctext xml:lang='C'>
434 435 List of separator characters for values.
435 436 </loctext>
436 437 </description>
437 438 <visibility value='hidden'/>
438 439 <cardinality min='1'/>
439 440 </prop_pattern>
440 441 <prop_pattern name='constraint_name' type='astring'
441 442 required='false'>
442 443 <description>
443 444 <loctext xml:lang='C'>
444 445 Values the property is expected to be constrained to.
445 446 </loctext>
446 447 </description>
447 448 <visibility value='hidden'/>
448 449 <cardinality min='1'/>
449 450 </prop_pattern>
450 451 <prop_pattern name='constraint_range' type='astring'
451 452 required='false'>
452 453 <description>
453 454 <loctext xml:lang='C'>
454 455 Ranges the property is expected to be constrained to.
455 456 </loctext>
456 457 </description>
457 458 <visibility value='hidden'/>
458 459 <cardinality min='1'/>
459 460 <internal_separators>,</internal_separators>
460 461 </prop_pattern>
461 462 <prop_pattern name='choices_range' type='astring'
462 463 required='false'>
463 464 <description>
464 465 <loctext xml:lang='C'>
465 466 Ranges a user should be offered as a choice for this property.
466 467 </loctext>
467 468 </description>
468 469 <visibility value='hidden'/>
469 470 <cardinality min='1'/>
470 471 <internal_separators>,</internal_separators>
471 472 </prop_pattern>
472 473 <prop_pattern name='choices_name' type='astring'
473 474 required='false'>
474 475 <description>
475 476 <loctext xml:lang='C'>
476 477 Values a users should be offered as a choice for this property.
477 478 </loctext>
478 479 </description>
479 480 <visibility value='hidden'/>
480 481 <cardinality min='1'/>
481 482 </prop_pattern>
482 483 <prop_pattern name='choices_include_values'
483 484 type='astring' required='false'>
484 485 <description>
485 486 <loctext xml:lang='C'>
486 487 Whether the choices should include the defined constraints or values.
487 488 </loctext>
488 489 </description>
489 490 <visibility value='hidden'/>
490 491 <cardinality min='1' max='1'/>
491 492 <constraints>
492 493 <value name='constraints'>
493 494 <description>
494 495 <loctext xml:lang='C'>
495 496 Include all defined constraints as choices.
496 497 </loctext>
497 498 </description>
498 499 </value>
499 500 <value name='values'>
500 501 <description>
501 502 <loctext xml:lang='C'>
502 503 Include all defined values as choices.
503 504 </loctext>
504 505 </description>
505 506 </value>
506 507 </constraints>
507 508 </prop_pattern>
508 509 </pg_pattern>
509 510
510 511 <pg_pattern name='method_context' type='framework'
511 512 target='all' required='false'>
512 513 <description>
513 514 <loctext xml:lang='C'>
514 515 Specifies the default execution context for all service methods. It is defined by the service author, may be augmented by an administrator, and is consumed by the service's restarter.
515 516 </loctext>
516 517 </description>
517 518
518 519 <!-- method_context direct properties -->
519 520 <prop_pattern name='working_directory' type='astring'
520 521 required='false'>
521 522 <description>
522 523 <loctext xml:lang='C'>
523 524 The working directory to launch the method from. ":default" can be used as a token to indicate the home directory of the user specified by the credential or profile.
524 525 </loctext>
525 526 </description>
526 527 <cardinality min='1' max='1'/>
527 528 </prop_pattern>
528 529 <prop_pattern name='project' type='astring'
529 530 required='false'>
530 531 <description>
531 532 <loctext xml:lang='C'>
532 533 The project ID in numeric or text form. ":default" can be used as a token to indicate a project identified by getdefaultproj(3PROJECT) for the user whose uid is used to launch the method.
533 534 </loctext>
534 535 </description>
535 536 <cardinality min='1' max='1'/>
536 537 </prop_pattern>
537 538 <prop_pattern name='resource_pool' type='astring'
538 539 required='false'>
539 540 <description>
540 541 <loctext xml:lang='C'>
541 542 The resource pool name in which to launch the method. ":default" can be used
542 543 as a token to indicate the pool specified in the project(4) entry given in
543 544 the project attribute.
544 545 </loctext>
545 546 </description>
546 547 <cardinality min='1' max='1'/>
547 548 </prop_pattern>
548 549 <prop_pattern name='security_flags' type='astring'
549 550 required='false'>
550 551 <description>
551 552 <loctext xml:lang='C'>
552 553 An optional string specifying the security flags as defined in security-flags(5).
553 554 </loctext>
554 555 </description>
555 556 <cardinality min='1' max='1'/>
556 557 </prop_pattern>
557 558
558 559 <!-- method_credential properties -->
559 560 <prop_pattern name='user' type='astring'
560 561 required='false'>
561 562 <description>
562 563 <loctext xml:lang='C'>
563 564 The user ID in numeric or text form.
564 565 </loctext>
565 566 </description>
566 567 <cardinality min='1' max='1'/>
567 568 </prop_pattern>
568 569 <prop_pattern name='group' type='astring'
569 570 required='false'>
570 571 <description>
571 572 <loctext xml:lang='C'>
572 573 The group ID in numeric or text form.
573 574 </loctext>
574 575 </description>
575 576 <cardinality min='1' max='1'/>
576 577 </prop_pattern>
577 578 <prop_pattern name='supp_groups' type='astring'
578 579 required='false'>
579 580 <description>
580 581 <loctext xml:lang='C'>
581 582 An optional string that specifies the supplemental group memberships by ID,
582 583 in numeric or text form.
583 584 </loctext>
584 585 </description>
585 586 <cardinality min='1' max='1'/>
586 587 </prop_pattern>
587 588 <prop_pattern name='privileges' type='astring'
588 589 required='false'>
589 590 <description>
590 591 <loctext xml:lang='C'>
591 592 An optional string specifying the privilege set as defined in privileges(5).
592 593 </loctext>
593 594 </description>
594 595 <cardinality min='1' max='1'/>
595 596 </prop_pattern>
596 597 <prop_pattern name='limit_privileges' type='astring'
597 598 required='false'>
598 599 <description>
599 600 <loctext xml:lang='C'>
600 601 An optional string specifying the limit privilege set as defined in
601 602 privileges(5).
602 603 </loctext>
603 604 </description>
604 605 <cardinality min='1' max='1'/>
605 606 </prop_pattern>
606 607
607 608 <!-- method_profile properties -->
608 609 <prop_pattern name='use_profile' type='boolean'
609 610 required='false'>
610 611 <description>
611 612 <loctext xml:lang='C'>
612 613 A boolean that specifies whether the profile should be used instead of the
613 614 user, group, privileges, and limit_privileges properties.
614 615 </loctext>
615 616 </description>
616 617 <cardinality min='1' max='1'/>
617 618 </prop_pattern>
618 619 <prop_pattern name='profile' type='astring'
619 620 required='false'>
620 621 <description>
621 622 <loctext xml:lang='C'>
622 623 The name of an RBAC (role-based access control) profile which, along with the
623 624 method executable, identifies an entry in exec_attr(4).
624 625 </loctext>
625 626 </description>
626 627 <cardinality min='1' max='1'/>
627 628 </prop_pattern>
628 629 </pg_pattern>
629 630
630 631 <pg_pattern name='firewall_context'
631 632 type='com.sun,fw_definition' target='all' required='false'>
632 633 <common_name>
633 634 <loctext xml:lang='C'>
634 635 Static definition
635 636 </loctext>
636 637 </common_name>
637 638 <description>
638 639 <loctext xml:lang='C'>
639 640 Service static network and firewall definition.
640 641 </loctext>
641 642 </description>
642 643 <prop_pattern name='name' type='astring'
643 644 required='false'>
644 645 <common_name>
645 646 <loctext xml:lang='C'>
646 647 Service name
647 648 </loctext>
648 649 </common_name>
649 650 <description>
650 651 <loctext xml:lang='C'>
651 652 IANA name or RPC name for non-inetd service, equivalent to inetd/name property. For RPC services, the value of this property is not an IANA name but is either an RPC program number or name, see rpc(4).
652 653 </loctext>
653 654 </description>
654 655 </prop_pattern>
655 656 <prop_pattern name='isrpc' type='boolean'
656 657 required='false'>
657 658 <common_name>
658 659 <loctext xml:lang='C'>
659 660 RPC service
660 661 </loctext>
661 662 </common_name>
662 663 <description>
663 664 <loctext xml:lang='C'>
664 665 A boolean property where a "true" value indicates an RPC service, equivalent to inetd/isrpc property.
665 666 </loctext>
666 667 </description>
667 668 </prop_pattern>
668 669 <prop_pattern name='ipf_method' type='astring'
669 670 required='false'>
670 671 <common_name>
671 672 <loctext xml:lang='C'>
672 673 Custom firewall script
673 674 </loctext>
674 675 </common_name>
675 676 <description>
676 677 <loctext xml:lang='C'>
677 678 A script that generates ipf rules for a service. Services that require custom IPfilter configuration can use this mechanism to generate and supply their own ipf rules. The firewall framework does not generate rules for services that has this property definition but expect these services to provide their own rules.
678 679 </loctext>
679 680 </description>
680 681 </prop_pattern> </pg_pattern>
681 682
682 683 <pg_pattern name='firewall_config'
683 684 type='com.sun,fw_configuration' target='all'
684 685 required='false'>
685 686 <common_name>
686 687 <loctext xml:lang='C'>
687 688 Firewall configuration
688 689 </loctext>
689 690 </common_name>
690 691 <description>
691 692 <loctext xml:lang='C'>
692 693 Service firewall configuration.
693 694 </loctext>
694 695 </description>
695 696 <prop_pattern name='policy' type='astring'
696 697 required='true'>
697 698 <common_name>
698 699 <loctext xml:lang='C'>
699 700 Firewall policy
700 701 </loctext>
701 702 </common_name>
702 703 <description>
703 704 <loctext xml:lang='C'>
704 705 Service firewall policy.
705 706 </loctext>
706 707 </description>
707 708 <visibility value='readwrite'/>
708 709 <cardinality min='1' max='1'/>
709 710 <values>
710 711 <value name='use_global'>
711 712 <description>
712 713 <loctext xml:lang='C'>
713 714 Apply Global Default policy, specified in network/ipfilter for the service. This is the default value.
714 715 </loctext>
715 716 </description>
716 717 </value>
717 718 <value name='none'>
718 719 <description>
719 720 <loctext xml:lang='C'>
720 721 No firewall (allow all).
721 722 </loctext>
722 723 </description>
723 724 </value>
724 725 <value name='deny'>
725 726 <description>
726 727 <loctext xml:lang='C'>
727 728 Deny access to entities specified in 'apply_to' property.
728 729 </loctext>
729 730 </description>
730 731 </value>
731 732 <value name='allow'>
732 733 <description>
733 734 <loctext xml:lang='C'>
734 735 Allow access to entities specified in 'apply_to' property.
735 736 </loctext>
736 737 </description>
737 738 </value>
738 739 </values>
739 740 <choices>
740 741 <include_values type='values'/>
741 742 </choices>
742 743 </prop_pattern>
743 744 <prop_pattern name='block_policy' type='astring'
744 745 required='false'>
745 746 <common_name>
746 747 <loctext xml:lang='C'>
747 748 Firewall block policy
748 749 </loctext>
749 750 </common_name>
750 751 <description>
751 752 <loctext xml:lang='C'>
752 753 Service firewall block policy.
753 754 </loctext>
754 755 </description>
755 756 <visibility value='readwrite'/>
756 757 <cardinality min='1' max='1'/>
757 758 <values>
758 759 <value name='use_global'>
759 760 <description>
760 761 <loctext xml:lang='C'>
761 762 Apply Global Default block policy, specified in network/ipfilter for the service. This is the default value.
762 763 </loctext>
763 764 </description>
764 765 </value>
765 766 <value name='none'>
766 767 <description>
767 768 <loctext xml:lang='C'>
768 769 Block by dropping packets.
769 770 </loctext>
770 771 </description>
771 772 </value>
772 773 <value name='return'>
773 774 <description>
774 775 <loctext xml:lang='C'>
775 776 Block by returning RST or ICMP messages.
776 777 </loctext>
777 778 </description>
778 779 </value>
779 780 </values>
780 781 <choices>
781 782 <include_values type='values'/>
782 783 </choices>
783 784 </prop_pattern>
784 785 <prop_pattern name="apply_to" type="astring"
785 786 required="false">
786 787 <common_name>
787 788 <loctext xml:lang='C'>
788 789 Apply policy to
789 790 </loctext>
790 791 </common_name>
791 792 <description>
792 793 <loctext xml:lang="C">
793 794 The source host and network IPv4 addresses, incoming network interfaces, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
794 795 </loctext>
795 796 </description>
796 797 </prop_pattern>
797 798 <prop_pattern name="apply_to_6" type="astring"
798 799 required="false">
799 800 <common_name>
800 801 <loctext xml:lang='C'>
801 802 Apply policy to
802 803 </loctext>
803 804 </common_name>
804 805 <description>
805 806 <loctext xml:lang="C">
806 807 The source host and network IPv6 addresses, incoming network interfaces, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
807 808 </loctext>
808 809 </description>
809 810 </prop_pattern>
810 811 <prop_pattern name="exceptions" type="astring"
811 812 required="false">
812 813 <common_name>
813 814 <loctext xml:lang='C'>
814 815 Make exceptions to
815 816 </loctext>
816 817 </common_name>
817 818 <description>
818 819 <loctext xml:lang="C">
819 820 The source host and network IPv4 addresses, incoming network interfaces, and ippools to exempt from the set policy. That is, those to accept if the policy is set to deny, or to deny if the policy is set to accept.
820 821 </loctext>
821 822 </description>
822 823 </prop_pattern>
823 824 <prop_pattern name="exceptions_6" type="astring"
824 825 required="false">
825 826 <common_name>
826 827 <loctext xml:lang='C'>
827 828 Make exceptions to
828 829 </loctext>
829 830 </common_name>
830 831 <description>
831 832 <loctext xml:lang="C">
832 833 The source host and network IPv6 addressess, incoming network interfaces, and ippools to exempt from the set policy. That is, those to accept if the policy is set to deny, or to deny if the policy is set to accept.
833 834 </loctext>
834 835 </description>
835 836 </prop_pattern>
836 837 <prop_pattern name="target" type="astring"
837 838 required="false">
838 839 <common_name>
839 840 <loctext xml:lang='C'>
840 841 Apply policy to
841 842 </loctext>
842 843 </common_name>
843 844 <description>
844 845 <loctext xml:lang="C">
845 846 The destination host and network IPv4 addresses, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
846 847 </loctext>
847 848 </description>
848 849 </prop_pattern>
849 850 <prop_pattern name="target6" type="astring"
850 851 required="false">
851 852 <common_name>
852 853 <loctext xml:lang='C'>
853 854 Apply policy to
854 855 </loctext>
855 856 </common_name>
856 857 <description>
857 858 <loctext xml:lang="C">
858 859 The destination host and network IPv6 addresses, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
859 860 </loctext>
860 861 </description>
861 862 </prop_pattern>
862 863 </pg_pattern>
863 864 <pg_pattern type='notify_params' target='all' required='false'>
864 865 <common_name>
865 866 <loctext xml:lang='C'>
866 867 FMA and SMF notification parameters
867 868 </loctext>
868 869 </common_name>
869 870 <description>
870 871 <loctext xml:lang='C'>
871 872 Parameters for notification of FMA events and SMF state transitions.
872 873 </loctext>
873 874 </description>
874 875 <prop_pattern name='smtp,active' type='boolean'
875 876 required='false'>
876 877 <common_name>
877 878 <loctext xml:lang='C'>
878 879 smtp notification active
879 880 </loctext>
880 881 </common_name>
881 882 <description>
882 883 <loctext xml:lang='C'>
883 884 Notifcation mechanism smtp active status.
884 885 </loctext>
885 886 </description>
886 887 </prop_pattern>
887 888 <prop_pattern name='smtp,to' type='astring'
888 889 required='false'>
889 890 <common_name>
890 891 <loctext xml:lang='C'>
891 892 smtp notification recipient
892 893 </loctext>
893 894 </common_name>
894 895 <description>
895 896 <loctext xml:lang='C'>
896 897 Recipient for smtp notification mechanism.
897 898 </loctext>
898 899 </description>
899 900 </prop_pattern>
900 901 <prop_pattern name='smtp,reply-to' type='astring'
901 902 required='false'>
902 903 <common_name>
903 904 <loctext xml:lang='C'>
904 905 smtp notification reply-to
905 906 </loctext>
906 907 </common_name>
907 908 <description>
908 909 <loctext xml:lang='C'>
909 910 Header reply-to for smtp notification mechanism.
910 911 </loctext>
911 912 </description>
912 913 </prop_pattern>
913 914 <prop_pattern name='snmp,active' type='boolean'
914 915 required='false'>
915 916 <common_name>
916 917 <loctext xml:lang='C'>
917 918 snmp notification active
918 919 </loctext>
919 920 </common_name>
920 921 <description>
921 922 <loctext xml:lang='C'>
922 923 Notifcation mechanism snmp active status.
923 924 </loctext>
924 925 </description>
925 926 </prop_pattern>
926 927 <prop_pattern name='syslog,active' type='boolean'
927 928 required='false'>
928 929 <common_name>
929 930 <loctext xml:lang='C'>
930 931 syslog notification active
931 932 </loctext>
932 933 </common_name>
933 934 <description>
934 935 <loctext xml:lang='C'>
935 936 Notifcation mechanism syslog active status.
936 937 </loctext>
937 938 </description>
938 939 </prop_pattern>
939 940 </pg_pattern>
940 941 </template>
941 942 </service>
942 943
943 944 </service_bundle>
|
↓ open down ↓ |
828 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX