Hot answers tagged

4

There are with no doubt security mechanism in place to isolate non-global zones from each other as this is actually how zones were implemented by design. Excerpt from Introduction to Oracle® Solaris Zones A process assigned to a zone can manipulate, monitor, and directly communicate with other processes that are assigned to the same zone. The ...


4

Check the file /etc/hostname.bge0, the configured IP address could be in there. By default the hostname is listed in that file and the name is looked up in /etc/inet/hosts. From the found entry, the IP address is used together with the corresponding netmask from /etc/inet/netmasks. If a network entry can not be found, the default for the the class type (A, B ...


3

Solaris will ask you for privileged user credentials when entering single user mode. In Solaris 11 the root user is by default a role and you can not use it to logon, even within single user mode. If you lost your user credentials you can recover from this by the following procedure: Reboot from Solaris 11 installation media Choose option 3 to enter a ...


3

My advice is keep things simple. Don't write a whole script when there is a ready-made tool that already does what you want. du is the tool for reporting on disk usage, and find is the tool for finding files. Use them together. find dirname* -mindepth 1 -maxdepth 1 -type d -exec du -hs {} \; -maxdepth and -mindepth are GNU extensions; to handle this ...


2

As is often the case on Solaris, /usr/bin/egrep is a legacy implementation that isn't POSIX-compliant, while /usr/xpg4/bin/egrep is a POSIX-compliant implementation and has little if anything beyond POSIX. Unless you're running legacy Solaris applications from the pre-POSIX days, make sure that /usr/xpg4/bin is before /usr/bin in your $PATH. GNU tools ...


2

Solaris 10 has a Common Criteria evaluation at EAL4+ of the Labelled Security Protection Profile. That separation is provided by Zones. Zones were designed to provide exactly this separation when deployed in the Trusted Extensions configuration. The original question describes a pretty much classic use case for a Solaris Trusted Extensions and there are ...


2

Actually, the behavior I see for Linux (and OSX) matches SunOS reasonably well, with some differences for the number of digits. HPUX follows the description in POSIX, which shows no leading blanks in the format: "%d %d %d %s\n", <newlines>, <words>, <bytes>, <file> You can imitate SunOS's format using awk #!/bin/sh wc () { ...


1

For speed and simplicity, I would pipe the command output into wc -l as Munir suggests. If you really want to use awk, just print the number of records in the END block: awk 'END { print NR }'


1

The answer is kinda yes and kinda no. Zones rely on the same kernel running on the hosting LDOM or the physical server. If he kernel gets breached, all of them are hosed. But as far as server roles are considered, you can say that they are isolated, provided you did your networking setup due diligence real well. In an ideal world, you do not resort to this ...



Only top voted, non community-wiki answers of a minimum length are eligible