David, Thanks for your quick response. I'm not quite sure what the difference is between the default instance and the service. I thought that you could use the shorthand (inetd) to identify the service if it is unique.
Also, I read the man page for the "refresh" option but I'm still not quite clear on what it does. David Finberg wrote: > On Thu, 21 Dec 2006, Jim Laurent wrote: > >> I am working on a Sol. Sec. Toolkit profile to comply with a customer >> requirement. I'm learning a lot but confused a bit by TCP wrappers >> configuration. >> >> I read Glenn Brunette's paper at: >> http://www.sun.com/bigadmin/content/submitted/tcp_wrap_solaris10.html >> >> After running the toolkit with the enable-tcpwrappers.fin script >> enabled, I'm getting conflicting information from my Solaris 10 >> 11/06 system: >> >> # inetadm -p |grep tcp >> tcp_trace=TRUE >> tcp_wrappers=TRUE >> > > these are the defaults for inetd services. > >> # svcprop inetd |grep tcp >> defaults/tcp_trace boolean false >> defaults/tcp_wrappers boolean false > > This is the svc:/network/inetd:default instance. It might need to be > refreshed. > >> >> # svcprop network/inetd|grep tcp >> defaults/tcp_trace boolean true >> defaults/tcp_wrappers boolean true >> > > and these are the svc:/network/inetd service. Use the -f flag to > svcprop to see what is going on here. > > -- Dave -- <http://www.sun.com/solaris> * Jim Laurent * Architect Phone x24859/+1 703 204 4859 Mobile 703-624-7000 Fax 703-208-5858 Email Jim.Laurent at Sun.COM <mailto:jim.laurent at sun.com> <mailto:jim.laurent at sun.com> *Sun Microsystems, Inc.* <http://www.sun.com> 7900 Westpark Dr, A110 McLean, VA 22102 US -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.opensolaris.org/pipermail/smf-discuss/attachments/20061221/e69c4852/attachment.html>
