Trusted Solaris Administrator's Procedures

To Add Services to the inetd.conf File

  1. Assume the Security Administrator role and use the Admin Editor action in an ADMIN_LOW workspace to open the /etc/inet/inetd.conf file for editing.

    For example, the following line adds a service in /usr/local/bin named newservice with the CLIENT keyword in the UID field so that the service executes with the UID and GID(s) of the CLIENT. In the flags field, the trusted keyword causes the service to run with the trusted path attribute, and the setaudit keyword causes the service to run with the client's audit characteristics:


    myport stream tcp6 nowait,trusted,setaudit CLIENT /usr/local/bin/newservice
  2. Save and quit the file.


    :wq
    
  3. If the service needs to run with privileges or a restricted label range, use the Rights tool to add the service to the inetd rights profile along with any desired security attributes.