Immutable global zones support has been added to extend the immutable zone capability to the global zone. If a system is configured to have an immutable global zone, files in the root file system are read-only. A Trusted Path login allows access to perform maintenance tasks, such as system updates.
For example, to enable immutable global zones:
# zonecfg -z global set file-mac-profile=fixed-configuration
For more information, see Chapter 12, Configuring and Administering Immutable Zones, in Creating and Using Oracle Solaris Zones .