Creating and Using Oracle Solaris Kernel Zones

Exit Print View

Updated: December 2014
 
 

Maintaining and Administering Read-Only Kernel Zones

Use the Trusted Path mode in the zlogin command to perform maintenance and administration operations on read-only kernel zones. The Trusted Path mode has the following options:

–T

Allows administrators to enter an immutable zone with the Trusted Path attribute PRIV_PROC_TPD set. This session can modify files that are normally immutable. The session cannot read unprotected files.

–U

Performs the same process as the –T option, but in unsafe mode. This option is required for zones with the flexible-configuration setting of the file-mac-profile property.


Note -  These options cannot be used with console login sessions. Both the –T and –U zlogin command options are ignored for zones that are not immutable zones.

See the zlogin(1) man page for more information.