To configure a kernel zone as an immutable zone, set the file-mac-profile property from within the kernel zone. See Configuring Read-Only Zones in Creating and Using Oracle Solaris Zones for additional information about the file-mac-profile property.