Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Disable GSS (Unless Using Kerberos)

The GSS (generic security service) manages the generation and validation of GSS-API (Generic Security Service Application Program Interface) security tokens. The gssd daemon operates between the kernel rpc and the GSS-API. For more information, refer to the Oracle Solaris gssd(1M) man page.

1. Log in to one of the compute servers and access the host console as superuser.

   See Log into a Compute Server.

2. Enable rpc/gss.

   # svcadm enable rpc/gss
   

3. Set a size limit for /tmpfs.

   The size of the tmpfs file system is not limited by default. To avoid a performance impact, you can limit the size of each tmpfs mount. For more information, refer to the Oracle Solaris mount_tmpfs(1M) man page and the vfstab(4) man page.

   # pfedit /etc/vfstab
   ...
   swap - /tmp tmpfs - yes size=sz
   

4. Reboot the compute server.

   # reboot