Krzys writes:
> It does make those file systems as read-only loopback, is there any way to 
> make 
> /usr read/write loopback or even if I need to make it as a separate file 
> system 
> partition of directory. I would like to make it so its read/write partition.

If you were to configure it using "add fs" and "set type=lofs" to
create a read-write loopback mount, this would allow the non-global
zone to modify the /usr visible in the global zone and all other

It's unclear to me why you'd want to do that.  It breaks one of the
fundamental security assertions of Zones: that applications inside the
zone cannot change parts of the system that are outside of the zone.

It also likely wouldn't work, as package installation would attempt to
write to /usr twice (once in the global zone when the system itself is
installed, again in the non-global zone when the zone is installed),
with unpredictable results.

If you need a writable /usr inside the non-global zone, then use a
whole root zone to do it.  If you want the /usr to reside on some
other file system (e.g., a separate slice), then use something like
"add fs" and "set type=ufs".

Note that it's often unnecessary to have a writable /usr in a
non-global zone.  Many users instead create a writable /usr/local for
locally-installed things in non-global zones:

        add fs
        set dir=/usr/local
        set special=/export/home/my-zone-local
        set type=lofs

Then you can have separate directories (/export/home/my-zone-local,
/export/home/your-zone-local) out in the global zone that hold the
separate /usr/local bits for each non-global zone.

James Carlson, KISS Network                    <[EMAIL PROTECTED]>
Sun Microsystems / 1 Network Drive         71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677
zones-discuss mailing list

Reply via email to