Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Oracle Exam 1Z0-580 Topic 10 Question 38 Discussion

Actual exam question for Oracle's 1Z0-580 exam
Question #: 38
Topic #: 10
[All 1Z0-580 Questions]

After installing and customizing an Oracle Solaris 11 non-global (solaris brand) zone, you execute commands:

# zonecfg --z myzone 'set file-mac-profile=fixed-configuration'

# zoneadm --z myzone reboot

What is the impact of making this specific change?

Show Suggested Answer Hide Answer
Suggested Answer: E

Through the zonecfg utility, the file-mac-profile can be set to one of the following values (see note below). All of the profiles except none will cause the /var/pkg directory and its contents to be read-only from inside the zone.

* none

Standard, read-write, non-global zone, with no additional protection beyond the existing zones boundaries. Setting the value to none is equivalent to not setting file-mac-profile property.

* strict

* fixed-configuration

Permits updates to /var/* directories, with the exception of directories that contain system configuration components.

IPS packages, including new packages, cannot be installed.

Persistently enabled SMF services are fixed.

SMF manifests cannot be added from the default locations.

Logging and auditing configuration files can be local. syslog and audit configuration are fixed.

* flexible-configuration

Note:

zonecfg file-mac-profile Property

By default, the zonecfg file-mac-profile property is not set in a non-global zone. A zone is configured to have a writable root dataset.

In a solaris read-only zone, the file-mac-profile property is used to configure a read-only zone root. A read---only root restricts access to the runtime environment from inside the zone.


Contribute your Thoughts:

Currently there are no comments in this discussion, be the first to comment!


Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77