Glenn Brunette wrote: > What kind of debugging options are available to determine what > commands may be needed by SMF to start a service? For example, > if I want to take away the "Basic Solaris User" rights profile > from the default and add only those commands that I need, how > can I determine what SMF needs (beyond what the actual service > being started needs)? The SMF service log was not really helpful > in this case.
Can you describe what the problem you saw was ? If understand correctly you are saying that you removed "Basic Solaris User" from PROFS_GRANTED in policy.conf(4) and as a result some SMF services failed to start ? Which ones ? > Also, is there a way to set an audit context for a SMF-managed > service? Not today but I believe their should be. However it doesn't really make sense until we have the "always on audit" project done because some SMF services would start too early. Traditionally system processes started by init/rc were not subject to audit but in the brave new world of SMF and always on audit I think we have some great scope for doing more here. -- Darren J Moffat
