8.12. Solaris Trusted Extensions Issues

8.12.1. Audio

Remove the setuid-0 bit on the utaudio binary.

# chmod u-s /opt/SUNWut/bin/utaudio

8.12.2. Volume Control

The volume control applet on the panel doesn't work in Trusted JDS.

Workaround: To adjust the volume, use the three volume keys on the keyboard or launch the Sun Ray Settings GUI by pressing Shift-Props.

Reference: CR 6481380

8.12.3. Multiple Slices/Partitions

Sun Ray mass storage only handles a single slice or partition for use by the Trusted Extensions device allocation framework.

Reference: CR 12195719

8.12.4. Flash Disk Allocation

Allocating flash disk with UFS file system second time does not work.

Workaround: Hot-plug the device.

Reference: CR 12202377

8.12.5. Multihead Role Assumption

In a multihead Trusted JDS session, role assumption does not work until utmhscreen is removed.

Reference: CR 12240048

8.12.6. Multihead Screen Lock

In multihead trusted CDE session, the session cannot be retrieved once the screen has been locked manually via screen lock.

Workaround: Users should use Shift-Pause to lock their screens.

To avoid this situation by making sure that the screen cannot be locked in the normal fashion, comment out the following line in the /etc/pam.conf file:

dtsession-SunRay auth sufficient /opt/SUNWut/lib/pam_sunray.so syncondisplay

A second alternative is to disable RHA, either by specifying the -D option to utpolicy or by selecting Direct Session Access Allowed from the Advanced/System Policy page of the Admin GUI.

Reference: CR 12240927

8.12.7. Sun Ray Interconnect Configuration

The following entry should be made available in /etc/security/tsol/tnrhdb:

0.0.0.0/32:admin_low

Reference: CR 12247254

8.12.8. xscreensaver Links

Verify that following links are created so that xscreensaver can work correctly:

# ln -s /usr/openwin/bin/xscreensaver /usr/bin/xscreensaver
# ln -s /usr/openwin/bin/xscreensaver-command /usr/bin/xscreensaver-command
# ln -s /usr/openwin/bin/xscreensaver-demo /usr/bin/xscreensaver-demo