A device-clean script is run when a device is allocated or deallocated. Oracle Solaris provides scripts for tape drives and CD-ROM drives. If your site adds allocatable device types to the system, the added devices might need scripts. To see existing scripts, go to the /etc/security/lib directory. For more information, see Device-Clean Scripts in Securing Systems and Attached Devices in Oracle Solaris 11.2 .
For Trusted Extensions software, device-clean scripts must satisfy certain requirements. These requirements are described in the device_clean(5) man page.