> svccfg extract > #on the origin system/zone
> with customized SMF profile
>
> cp /var/svc/profile/generic.xml #on the target
> system/zone prior to first boot
>
> and you have a customized service definition, a la SBD, applied
> at first boot, so your are never more vulnerable than you want to
Brad Diggs wrote:
> Hello Vic,
>
> You have a few options. You can use secure by default to
> disable most services and then as a post-zone creation
> process, run a custom script that enables the services
> that you want enabled through svcadm.
>
> Or, you could through jass define a custom s
The project and the script are available here:
http://opensolaris.org/os/project/zonemgr
There is a reference from BigAdmin as well.
Brad
On Fri, 2007-11-16 at 21:45 -0500, Victor Engle wrote:
> On Nov 16, 2007 5:58 PM, Brad Diggs <[EMAIL PROTECTED]> wrote:
> > Hello Vic,
> >
> > All three of th
On Nov 16, 2007 5:58 PM, Brad Diggs <[EMAIL PROTECTED]> wrote:
> Hello Vic,
>
> All three of these options plus one more are available as
> through the -s option in the Zone Manager script. Feel free
> to download this bash shell script and re-use the methods
> employed in your own script. The pu
Hello Vic,
You have a few options. You can use secure by default to
disable most services and then as a post-zone creation
process, run a custom script that enables the services
that you want enabled through svcadm.
Or, you could through jass define a custom set of services
that you want disab
I have a perl script that I use to create many zones automatically. It creates
a template and sysidcfg file for the zone and creates and starts up the zone.
There are services which are disabled by default and I would like to have my
script configure those services to be enabled when the zone bo
