Creating and Using Oracle^® Solaris Zones

How to Modify Zone Privileges

Use this procedure to change privileges in a non-global zone. The default Oracle Solaris privileges and optional privileges you can specify for a zone are shown in Privileges in a Non-Global Zone.

1. Become a zone administrator.

   For more information, see Assigning Limited Rights to Zone Administrators.

2. Select the zone to be modified, my-zone in this procedure.

   global$ zonecfg -z my-zone
   zonecfg:my-zone>

3. Revise the set of privileges.

   zonecfg:my-zone> set limitpriv="default,file_flag_set"

   This line adds the ability to set immutable, nounlink or appendonly file attributes on files from within the non-global zone.

4. Commit the change.

   zonecfg:my-zone> commit

5. Exit the zonecfg command.

   zonecfg:my-zone> exit

   Committed changes made through zonecfg take effect the next time the zone is booted.