[zones-discuss] Can I use 32-bits apps in zone on x64 OSOL?

2010-09-29 Thread Anton Pomozov
Seapine TestTrack License Server compiled for 32-bit only. Or I need use xVM with PV 32-bit osol? -- This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Can I use 32-bits apps in zone on x64 OSOL?

2010-09-29 Thread James Carlson
Anton Pomozov wrote: Seapine TestTrack License Server compiled for 32-bit only. Or I need use xVM with PV 32-bit osol? 32-bit applications work fine on x64, whether inside a zone or not. Each process on x64 (and SPARC) can be either 32-bit or 64-bit and the system adapts as needed. The only

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread Orvar Korvar
I want to shut down the global zone, and want to surf only from local zones. You mean this is not possible? I dont really understand the implications of your post. What are you trying to say? That I must use Crossbow in b134? Or, that my plan is not possible to do? Or, that I should not shut

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread LaoTsao
--- Original message --- From: Orvar Korvar knatte_fnatte_tja...@yahoo.com To: zones-discuss@opensolaris.org Sent: 29.9.'10, 10:13 I want to shut down the global zone, and want to surf only from local zones. You mean this is not possible? Not possible I dont really understand the

Re: [zones-discuss] Can I use 32-bits apps in zone on x64 OSOL?

2010-09-29 Thread Anton Pomozov
Thank you. -- This message posted from opensolaris.org ___ zones-discuss mailing list zones-discuss@opensolaris.org

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread Orvar Korvar
Ok, so it is impossible to shutdown internet connection to the global zone and surf only from the local zones. If I want to surf from the local zones, the global zone's NIC must be activated. I suspect a hacker will attack the global zone, instead of the local zone that I surf from. Are there

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread James Carlson
Orvar Korvar wrote: Ok, so it is impossible to shutdown internet connection to the global zone and surf only from the local zones. If I want to surf from the local zones, the global zone's NIC must be activated. I suspect a hacker will attack the global zone, instead of the local zone that

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread LaoTsao
Hi U cannot shutdown gz Gz run the kernel and all servies for ngz But can setup firewall such that to restrict acces to ip tcp service and port --- Original message --- From: Orvar Korvar knatte_fnatte_tja...@yahoo.com To: zones-discuss@opensolaris.org Sent: 29.9.'10, 13:33 Ok, so

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread Jordan Vaughan
Is there a way to disable all remote connections to the GZ? In other words, couldn't you use a firewall to reject connections on all ports to the GZ? That would effectively deny remote access to the GZ without having to disable any network interfaces. Of course, disabling the GZ's

Re: [zones-discuss] Possible to use zones for hardening? Security?

2010-09-29 Thread Glenn Faden
Assuming you're using the shared IP stack (default), it is sufficient for the global zone interface(s) to be plumbed so that the non-global zones can use logical instances of the interface(s). So setting the GZ interfaces as down' will prevent network access to/from the global zone. --Glenn