How to Enter the Global Zone in Trusted Extensions

By assuming a role, you enter the global zone in Trusted Extensions. Administration of the entire system is possible only from the global zone. Only superuser or a role can enter the global zone.

After assuming a role, the role can create a workspace at a user label to edit administration files in a labeled zone.

For troubleshooting purposes, you can also enter the global zone by starting a Failsafe session. For details, see How to Log In to a Failsafe Session in Trusted Extensions.

Before You Begin

You have created one or more roles, or you plan to enter the global zone as superuser. For pointers, see Role Creation in Trusted Extensions.

1. Use a trusted mechanism.

   • In Solaris Trusted Extensions (JDS), click your user name in the trusted stripe and choose a role.

     If you have been assigned a role, the role names are displayed in a list.

     For the location and significance of Trusted Extensions desktop features, see Chapter 4, Elements of Trusted Extensions (Reference), in Oracle Solaris Trusted Extensions User’s Guide.

   • In Solaris Trusted Extensions (CDE), open the Trusted Path menu.

     1. Click mouse button 3 over the workspace switch area.

        

     2. Choose Assume rolename Role from the Trusted Path menu.

2. At the prompt, type the role password.

   In Trusted CDE, a new role workspace is created, the workspace switch button changes to the color of the role desktop, and the title bar above each window shows Trusted Path. In Trusted JDS, the current workspace changes to the role workspace.

   In Trusted CDE, you leave a role workspace by using the mouse to choose a regular user workspace. You can also delete the last role workspace to exit a role. In Trusted JDS, you click the role name on the trusted stripe, and from the menu, select a different role or user. This action changes the current workspace to the process of the new role or user.