Solaris 10 11/06 Installation Guide: Planning for Installation and Upgrade

Restricted Security Specifics

If you choose to restrict network security, numerous services are fully disabled. Other services are still enabled, but these services are restricted to local connections only. The Secure Shell remains fully enabled.

For example, the following table lists network services that, for the Solaris 10 11/06 release, are restricted to local connections.

Table 3–3 Solaris 10 11/06 SMF Restricted Services

Service 

FMRI 

Property 

rpcbind 

svc:/network/rpc/bind

config/local_only

syslogd 

svc:/system/system-log

config/log_from_remote

sendmail 

svc:/network/smtp:sendmail

config/local_only

smcwebserver 

svc:/system/webconsole:console

options/tcp_listen

WBEM 

svc:/application/management/wbem

options/tcp_listen

X server 

svc:/application/x11/x11-server

options/tcp_listen

dtlogin 

svc:/application/graphical-login/cde-login

dtlogin/args

ToolTalk 

svc:/network/rpccde-ttdbserver:tcp

proto=ticotsord

dtcm 

svc:/network/rpccde-calendar-manager

proto=ticits

BSD print 

svc:/application/print/rfc1179:default

bind_addr=localhost