Increased Restrictions on Cross Zone Communications (6837033)

Tightened restrictions on interzone communications for systems running Solaris Trusted Extensions configuration could limit noncompliant third-party applications, causing them to fail.

Workaround: Choose one of the following workarounds:

• Workaround 1: Temporarily alter the security settings. Comment out the following lines in the /lib/svc/method/svc-labeld file:

  /usr/sbin/ndd -set /dev/ip \ ip_restrict_interzone_loopback 1

• Type the following command:

  /usr/sbin/ndd -set /dev/ip ip_restrict_interzone_loopback 0

Although making this change would allow time to address any application programming or application configuration issues, it is not a recommended permanent solution.

• Workaround 2: Change the application or the configuration to conform to the programming and configuration instructions for a Solaris OS with Trusted Extensions configured. For more information, see Chapter 5, Interprocess Communications, in Solaris Trusted Extensions Developer’s Guide.

If correction of the application or its configuration is not feasible, please contact your Sun Services representative.