Trusted Solaris Installation and Configuration

Modifications to Custom JumpStart Profiles

Use the Trusted Solaris information in the following table to modify the procedures in "Creating a Profile" in Solaris 8 Advanced Installation Guide.

Table 9-5 Modified JumpStart Profile Procedures


Solaris Procedure	Trusted Solaris Modification
Edit a profile file.	As admin role at label `ADMIN_LOW`, use the Admin Editor action. For how to use the Admin Editor, see "To Create or Open a File from the Trusted Editor". The upgrade keyword is not supported in Trusted Solaris 8.

Use the Trusted Solaris information that follows to modify the procedures in "Testing a Profile" in Solaris 8 Advanced Installation Guide and "pfinstall" in Solaris 8 Advanced Installation Guide.

In the Trusted Solaris environment, testing profiles is handled by the admin role.

How to Use pfinstall to Test a Profile

On an installed and configured Trusted Solaris host, log in as a user who can assume the admin role.

As admin at label ADMIN_LOW, launch a terminal and see that the pfinstall(1M) command is available in the role's profile shell.
$ profiles -l | grep pfinstall
Note -
The name profile shell refers to a shell that recognizes Trusted Solaris execution profiles. It does not refer to the machine profiles being tested here.

If the command is not in the profile, the secadmin role must add it to the admin role's rights, and then the admin role launches a new terminal in which to run the command.

See "How to Modify a Role's Rights" for how to add the pfinstall command to the admin role's rights profile.