Robert Gordon wrote: ... > I'd even go further and say that any user > in the global zone would not have access to /export/z1. ...
This is already the case. The mode on the final zonepath directory must be 700. This is set when zoneadm installs the zone and verified when you do normal zone administration such as booting the zone. Jerry
