1<?xml version="1.0"?>
2<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
3<!--
4	Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
5	Use is subject to license terms.
6
7 CDDL HEADER START
8
9 The contents of this file are subject to the terms of the
10 Common Development and Distribution License (the "License").
11 You may not use this file except in compliance with the License.
12
13 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
14 or http://www.opensolaris.org/os/licensing.
15 See the License for the specific language governing permissions
16 and limitations under the License.
17
18 When distributing Covered Code, include this CDDL HEADER in each
19 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
20 If applicable, add the following below this CDDL HEADER, with the
21 fields enclosed by brackets "[]" replaced with your own identifying
22 information: Portions Copyright [yyyy] [name of copyright owner]
23
24 CDDL HEADER END
25
26	ident	"%Z%%M%	%I%	%E% SMI"
27
28	NOTE:  This service manifest is not editable; its contents will
29	be overwritten by package or patch operations, including
30	operating system upgrade.  Make customizations in a different
31	file.
32-->
33<service_bundle type='manifest' name='SUNWcsr:ipsecalgs'>
34
35<service
36	name='network/ipsec/ipsecalgs'
37	type='service'
38	version='1'>
39
40	<!-- The policy service depends on the 'ipsecalgs'
41	service being enabled. -->
42	<create_default_instance enabled='true' />
43
44	<single_instance />
45
46	<dependency
47		name='cryptosvc'
48		grouping='require_all'
49		restart_on='none'
50		type='service'>
51		<service_fmri value='svc:/system/cryptosvc' />
52	</dependency>
53
54        <dependency
55                name='config_data'
56                grouping='require_all'
57                type='path'
58		restart_on='none'>
59                <service_fmri value='file://localhost/etc/inet/ipsecalgs' />
60        </dependency>
61
62	<dependent
63		name='ipsecalgs-network'
64		grouping='optional_all'
65		restart_on='none'>
66		<service_fmri
67			value='svc:/milestone/network'
68		/>
69	</dependent>
70
71	<exec_method
72		type='method'
73		name='start'
74		exec='/usr/sbin/ipsecalgs -s'
75		timeout_seconds='60'
76	/>
77
78	<exec_method
79		type='method'
80		name='refresh'
81		exec='/usr/sbin/ipsecalgs -s'
82		timeout_seconds='60'
83	/>
84
85	<exec_method
86		type='method'
87		name='stop'
88		exec=':true'
89		timeout_seconds='3'
90	/>
91
92	<property_group name='general' type='framework'>
93		<!-- A user with this authorization can:
94
95			svcadm restart ipsecalgs
96			svcadm refresh ipsecalgs
97			svcadm mark <state> ipsecalgs
98			svcadm clear ipsecalgs
99
100		see auths(1) and user_attr(4)-->
101
102		<propval
103			name='action_authorization'
104			type='astring'
105			value='solaris.smf.manage.ipsec'
106		/>
107		<!-- A user with this authorization can:
108
109			svcadm disable ipsecalgs
110			svcadm enable ipsecalgs
111
112		 see auths(1) and user_attr(4)-->
113		<propval
114			name='value_authorization'
115			type='astring'
116			value='solaris.smf.manage.ipsec'
117		/>
118	</property_group>
119
120	<property_group name='startd' type='framework'>
121		<propval
122			name='duration'
123			type='astring'
124			value='transient'
125		/>
126	</property_group>
127
128	<stability value='Unstable' />
129
130	<template>
131		<common_name>
132			<loctext xml:lang='C'>
133				IPsec algorithm initialization
134			</loctext>
135		</common_name>
136		<description>
137			<loctext xml:lang='C'>
138				IPsec algorithm configuration involves
139				loading AH and ESP algorithm support.
140			</loctext>
141		</description>
142		<documentation>
143			<manpage
144				title='ipsecalgs'
145				section='1M'
146				manpath='/usr/share/man'
147			/>
148		</documentation>
149	</template>
150</service>
151</service_bundle>
152