Protecting a Legacy Service With SMF

You can limit application configuration to trusted users or roles by adding the application to the Service Management Facility (SMF) feature of Oracle Solaris, then requiring rights to start, refresh, and stop the service.

For information and procedures see the following:

• Locking Down Resources by Using Extended Privileges in Securing Users and Processes in Oracle Solaris 11.2

• Securing MySQL using SMF - the Ultimate Manifest.

• Selected man pages include smf(5), smf_security(5), svcadm(1M), svcbundle(1M), and svccfg(1M).