1e3320f40Smarkfen<?xml version="1.0"?>
2e3320f40Smarkfen<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
3e3320f40Smarkfen<!--
4e3320f40Smarkfen	Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
5e3320f40Smarkfen	Use is subject to license terms.
6e3320f40Smarkfen
78c8bbbb8SGarrett D'Amore	Copyright (c) 2012 DEY Storage Systems, Inc.  All rights reserved.
88c8bbbb8SGarrett D'Amore
9e3320f40Smarkfen CDDL HEADER START
10e3320f40Smarkfen
11e3320f40Smarkfen The contents of this file are subject to the terms of the
12e3320f40Smarkfen Common Development and Distribution License (the "License").
13e3320f40Smarkfen You may not use this file except in compliance with the License.
14e3320f40Smarkfen
15e3320f40Smarkfen You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
16e3320f40Smarkfen or http://www.opensolaris.org/os/licensing.
17e3320f40Smarkfen See the License for the specific language governing permissions
18e3320f40Smarkfen and limitations under the License.
19e3320f40Smarkfen
20e3320f40Smarkfen When distributing Covered Code, include this CDDL HEADER in each
21e3320f40Smarkfen file and include the License file at usr/src/OPENSOLARIS.LICENSE.
22e3320f40Smarkfen If applicable, add the following below this CDDL HEADER, with the
23e3320f40Smarkfen fields enclosed by brackets "[]" replaced with your own identifying
24e3320f40Smarkfen information: Portions Copyright [yyyy] [name of copyright owner]
25e3320f40Smarkfen
26e3320f40Smarkfen CDDL HEADER END
27e3320f40Smarkfen
28e3320f40Smarkfen	NOTE:  This service manifest is not editable; its contents will
29e3320f40Smarkfen	be overwritten by package or patch operations, including
30e3320f40Smarkfen	operating system upgrade.  Make customizations in a different
31e3320f40Smarkfen	file.
32e3320f40Smarkfen-->
33e3320f40Smarkfen<service_bundle type='manifest' name='SUNWcsr:ipsecalgs'>
34e3320f40Smarkfen
35e3320f40Smarkfen<service
36e3320f40Smarkfen	name='network/ipsec/ipsecalgs'
37e3320f40Smarkfen	type='service'
38e3320f40Smarkfen	version='1'>
39e3320f40Smarkfen
40e3320f40Smarkfen	<!-- The policy service depends on the 'ipsecalgs'
41e3320f40Smarkfen	service being enabled. -->
42e3320f40Smarkfen	<create_default_instance enabled='true' />
43e3320f40Smarkfen
44e3320f40Smarkfen	<single_instance />
45e3320f40Smarkfen
46e3320f40Smarkfen	<dependency
47e3320f40Smarkfen		name='cryptosvc'
48e3320f40Smarkfen		grouping='require_all'
49e3320f40Smarkfen		restart_on='none'
50e3320f40Smarkfen		type='service'>
51e3320f40Smarkfen		<service_fmri value='svc:/system/cryptosvc' />
52e3320f40Smarkfen	</dependency>
53e3320f40Smarkfen
54e3320f40Smarkfen        <dependency
55e3320f40Smarkfen                name='config_data'
56e3320f40Smarkfen                grouping='require_all'
57e3320f40Smarkfen                type='path'
58e3320f40Smarkfen		restart_on='none'>
59e3320f40Smarkfen                <service_fmri value='file://localhost/etc/inet/ipsecalgs' />
60e3320f40Smarkfen        </dependency>
61e3320f40Smarkfen
628c8bbbb8SGarrett D'Amore	<dependency
638c8bbbb8SGarrett D'Amore		name='filesystem'
648c8bbbb8SGarrett D'Amore		grouping='require_all'
658c8bbbb8SGarrett D'Amore		type='service'
668c8bbbb8SGarrett D'Amore		restart_on='error'>
678c8bbbb8SGarrett D'Amore		<service_fmri value='svc:/system/filesystem/usr' />
688c8bbbb8SGarrett D'Amore	</dependency>
698c8bbbb8SGarrett D'Amore
708c8bbbb8SGarrett D'Amore	<dependency
718c8bbbb8SGarrett D'Amore		name='devices'
728c8bbbb8SGarrett D'Amore		grouping='require_all'
738c8bbbb8SGarrett D'Amore		type='service'
748c8bbbb8SGarrett D'Amore		restart_on='none'>
758c8bbbb8SGarrett D'Amore		<service_fmri value='svc:/system/device/local' />
768c8bbbb8SGarrett D'Amore	</dependency>
778c8bbbb8SGarrett D'Amore
78e3320f40Smarkfen	<dependent
79e3320f40Smarkfen		name='ipsecalgs-network'
80e3320f40Smarkfen		grouping='optional_all'
81e3320f40Smarkfen		restart_on='none'>
82e3320f40Smarkfen		<service_fmri
83e3320f40Smarkfen			value='svc:/milestone/network'
84e3320f40Smarkfen		/>
85e3320f40Smarkfen	</dependent>
86e3320f40Smarkfen
87e3320f40Smarkfen	<exec_method
88e3320f40Smarkfen		type='method'
89e3320f40Smarkfen		name='start'
90e3320f40Smarkfen		exec='/usr/sbin/ipsecalgs -s'
91e3320f40Smarkfen		timeout_seconds='60'
92e3320f40Smarkfen	/>
93e3320f40Smarkfen
94e3320f40Smarkfen	<exec_method
95e3320f40Smarkfen		type='method'
96e3320f40Smarkfen		name='refresh'
97e3320f40Smarkfen		exec='/usr/sbin/ipsecalgs -s'
98e3320f40Smarkfen		timeout_seconds='60'
99e3320f40Smarkfen	/>
100e3320f40Smarkfen
101e3320f40Smarkfen	<exec_method
102e3320f40Smarkfen		type='method'
103e3320f40Smarkfen		name='stop'
104e3320f40Smarkfen		exec=':true'
105e3320f40Smarkfen		timeout_seconds='3'
106e3320f40Smarkfen	/>
107e3320f40Smarkfen
108e3320f40Smarkfen	<property_group name='general' type='framework'>
109e3320f40Smarkfen		<!-- A user with this authorization can:
110e3320f40Smarkfen
111e3320f40Smarkfen			svcadm restart ipsecalgs
112e3320f40Smarkfen			svcadm refresh ipsecalgs
113e3320f40Smarkfen			svcadm mark <state> ipsecalgs
114e3320f40Smarkfen			svcadm clear ipsecalgs
115e3320f40Smarkfen
116*bbf21555SRichard Lowe		see auths(1) and user_attr(5)-->
117e3320f40Smarkfen
118e3320f40Smarkfen		<propval
119e3320f40Smarkfen			name='action_authorization'
120e3320f40Smarkfen			type='astring'
121e3320f40Smarkfen			value='solaris.smf.manage.ipsec'
122e3320f40Smarkfen		/>
123e3320f40Smarkfen		<!-- A user with this authorization can:
124e3320f40Smarkfen
125e3320f40Smarkfen			svcadm disable ipsecalgs
126e3320f40Smarkfen			svcadm enable ipsecalgs
127e3320f40Smarkfen
128*bbf21555SRichard Lowe		 see auths(1) and user_attr(5)-->
129e3320f40Smarkfen		<propval
130e3320f40Smarkfen			name='value_authorization'
131e3320f40Smarkfen			type='astring'
132e3320f40Smarkfen			value='solaris.smf.manage.ipsec'
133e3320f40Smarkfen		/>
134e3320f40Smarkfen	</property_group>
135e3320f40Smarkfen
136e3320f40Smarkfen	<property_group name='startd' type='framework'>
137e3320f40Smarkfen		<propval
138e3320f40Smarkfen			name='duration'
139e3320f40Smarkfen			type='astring'
140e3320f40Smarkfen			value='transient'
141e3320f40Smarkfen		/>
142e3320f40Smarkfen	</property_group>
143e3320f40Smarkfen
144e3320f40Smarkfen	<stability value='Unstable' />
145e3320f40Smarkfen
146e3320f40Smarkfen	<template>
147e3320f40Smarkfen		<common_name>
148e3320f40Smarkfen			<loctext xml:lang='C'>
149e3320f40Smarkfen				IPsec algorithm initialization
150e3320f40Smarkfen			</loctext>
151e3320f40Smarkfen		</common_name>
152e3320f40Smarkfen		<description>
153e3320f40Smarkfen			<loctext xml:lang='C'>
154e3320f40Smarkfen				IPsec algorithm configuration involves
155e3320f40Smarkfen				loading AH and ESP algorithm support.
156e3320f40Smarkfen			</loctext>
157e3320f40Smarkfen		</description>
158e3320f40Smarkfen		<documentation>
159e3320f40Smarkfen			<manpage
160e3320f40Smarkfen				title='ipsecalgs'
161*bbf21555SRichard Lowe				section='8'
162e3320f40Smarkfen				manpath='/usr/share/man'
163e3320f40Smarkfen			/>
164e3320f40Smarkfen		</documentation>
165e3320f40Smarkfen	</template>
166e3320f40Smarkfen</service>
167e3320f40Smarkfen</service_bundle>
168