set-publisher --sticky

With --sticky, specify that updates to packages that were installed from this publisher must also come from this publisher. This is the default behavior.

* policy.conf

policy.conf– configuration file for security policy.

The policy.conf file provides the security policy configuration for user-level attributes.

* Example: Modifying Every User ' s Basic Privilege Set

In this example, the security administrator of a large Sun Ray installation does not want regular users to view the processes of other Sun Ray users. Therefore, on every system that is configured with Trusted Extensions, the root role removes proc_info from the basic set of privileges. The PRIV_DEFAULT setting in the /etc/policy.conf file is uncommented and modified as follows:

PRIV_DEFAULT=basic,!proc_info

Scheduling classes provide different CPU access characteristics to threads that are based on algorithmic logic. The scheduling classes include:

Realtime scheduling class (RT) (not a)

Interactive scheduling class (IA)

Fixed priority scheduling class (FX) (not b)

Timesharing scheduling class (TS) (not c)

Fair share scheduling class (FSS) (not E)

* Syntax:

priocntl -s [-c class] [class-specific options]

[-i idtype] [idlist]

* The priocntl command displays or sets scheduling parameters of the specified process(es). It can also be used to display the current configuration information for the system ' s process scheduler or execute a command with specified scheduling parameters.

Processes fall into distinct classes with a separate scheduling policy applied to each class. The process classes currently supported are the real-time class, time-sharing class, interactive class, fair-share class, and the fixed priority class.

* priocntl options include:

-c

class

Specifies the class to be set. (The valid class arguments are RT for real-time, TS for time-sharing, IA for inter-active, FSS for fair-share, or FX for fixed-priority.) If the specified class is not already configured, it is automatically configured.

-s

Sets the scheduling parameters associated with a set of processes.

The beadm utility enables you to create a new boot environment based on an existing snapshot.

Note:

* You can manage the boot environments on your system either by using the beadm command or by using the Package Manager.

* A boot environment is a bootable instance of the Oracle Solaris operating system image plus any other application software packages installed into that image. System administrators can maintain multiple boot environments on their systems, and each boot environment can have different software versions installed.

audit_remote

- send Solaris audit logs to a remote server

The audit_remote plugin module for Solaris audit, /usr/lib/security/audit_remote.so, sends binary audit records (audit.log) to audit servers as they are configured with auditconfig.

The audit_remote plugin is loaded by auditd if the plugin is configured as an active via auditconfig. Use the auditconfig -setplugin option to change all the plugin related configuration parameters.

Incorrect:

not D: Audit policy determines the characteristics of the audit records for the local host. When auditing is enabled, the contents of the /etc/security/audit_startup file determine the audit policy.

* zone.max-processes

Maximum number of process table slots

simultaneously available to this zone.

Because both normal processes and

zombie processes take up process table

slots, the max-processes control thus

protects against zombies exhausting the

process table. Because zombie processes

do not have any LWPs by definition, the

max-lwps control cannot protect against

this possibility

Note:

* prctl - operations on a process

Use the prctl command to make runtime interrogations of and modifications to the resource controls associated with an active process, task, or project on the system.

Required to maintain high availability -- > use a mirror.

The same data will be accessed many times throughout the day. Configure the storage for maximum performance. Use caching.

pkgrepo rebuild [-p publisher ...] -s repo_uri_or_path [--no-catalog] [--no-index]

Discards all catalog, search, and other cached information found in the repository, and then recreates it based on the current contents of the repository.

Incorrect:

Not A: pkg refresh [--full] [publisher ...]

Updates the client ' s list of available packages and publisher metadata for each publisher specified. If no publishers are specified, the operation is performed for all publishers.