7. Configuring and Administering RBAC and Least Privileges | Oracle Solaris 11 Advanced Administration Cookbook

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Oracle Solaris 11 Advanced Administration Cookbook

By : Borges

4.7 (7)

Oracle Solaris 11 Advanced Administration Cookbook

4.7 (7)

By: Borges

Overview of this book

If you are a Solaris administrator who wants to learn more about administering an Oracle Solaris system and want to go a level higher in utilizing the advanced features of Oracle Solaris, then this book is for you. A working knowledge of Solaris Administration is assumed.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. IPS and Boot Environments

1. IPS and Boot Environments

Introduction

Determining the current package publisher

Listing and collecting the information and dependencies of a package

Installing a package, verifying its content, and fixing the package corruption

Managing the IPS history and freezing and uninstalling packages

Discovering the IPS Package Manager interface

Creating, activating, and destroying a boot environment

Listing and renaming a boot environment

Configuring an IPS local repository

Configuring a secondary IPS local repository

Publishing packages into a repository

Adding big applications into a repository

Creating your own package and publishing it

Managing an IPS publisher on Solaris 11

Pinning publishers

Changing the URI and enabling and disabling a publisher

Creating a mirror repository

Removing a repository and changing the search order

Listing and creating a boot environment

Mounting, unmounting, installing, and uninstalling a package in an inactive boot environment

Activating a boot environment

Creating a boot environment from an existing one

References

2. ZFS

2. ZFS

Introduction

Creating ZFS storage pools and filesystems

Playing with ZFS faults and properties

Creating a ZFS snapshot and clone

Performing a backup in a ZFS filesystem

Handling logs and caches

Managing devices in storage pools

Configuring spare disks

Handling ZFS snapshots and clones

Playing with COMSTAR

Mirroring the root pool

ZFS shadowing

Configuring ZFS sharing with the SMB share

Setting and getting other ZFS properties

Playing with the ZFS swap

References

3. Networking

3. Networking

Introduction

Playing with Reactive Network Configuration

Internet Protocol Multipathing

Setting the link aggregation

Configuring network bridging

Configuring link protection and the DNS Client service

Configuring the DHCP server

Configuring Integrated Load Balancer

References

4. Zones

4. Zones

Introduction

Creating, administering, and using a virtual network in a zone

Managing a zone using the resource manager

Implementing a flow control

Working with migrations from physical Oracle Solaris 10 hosts to Oracle Solaris 11 Zones

References

5. Playing with Oracle Solaris 11 Services

5. Playing with Oracle Solaris 11 Services

Introduction

Reviewing SMF operations

Handling manifests and profiles

Creating SMF services

Administering inetd-controlled network services

Troubleshooting Oracle Solaris 11 services

References

6. Configuring and Using an Automated Installer (AI) Server

6. Configuring and Using an Automated Installer (AI) Server

Introduction

Configuring an AI server and installing a system from it

References

7. Configuring and Administering RBAC and Least Privileges

7. Configuring and Administering RBAC and Least Privileges

Introduction

Configuring and using RBAC

Playing with least privileges

References

8. Administering and Monitoring Processes

8. Administering and Monitoring Processes

Introduction

Monitoring and handling process execution

Managing processes' priority on Solaris 11

Configuring FSS and applying it to projects

References

9. Configuring the Syslog and Monitoring Performance

9. Configuring the Syslog and Monitoring Performance

Introduction

Configuring the syslog

Monitoring the performance on Oracle Solaris 11

References

Index

Index

Customer Reviews

4.7 (7)

5 star

71.4%

4 star

28.6%

3 star

0%

2 star

0%

1 star

0%

Configuring and using RBAC

Before explaining and implementing the RBAC feature, it is necessary to remember why RBAC is necessary and, afterwards, to learn some fundamental concepts.

According to our previous study on Oracle Solaris 11, it would not be possible for a normal user to reboot an Oracle Solaris 11 system, as shown in the following command:

root@solaris11-1:~# useradd -d /export/home/aborges -m -s /bin/bash aborges
80 blocks
root@solaris11-1:~# passwd aborges
New Password: hacker123!
Re-enter new Password: hacker123!
passwd: password successfully changed for aborges
root@solaris11-1:~# su - aborges
Oracle Corporation  SunOS 5.11  11.1  September 2012
aborges@solaris11-1:~$ reboot
reboot: permission denied
aborges@solaris11-1:~$

A simple and completely inappropriate solution would be to give a password from the root account to user aborges. However, this is unimaginable in a professional company. Another and a recommended solution is to use RBAC, which is a security feature that allows...

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Oracle Solaris 11 Advanced Administration Cookbook

Search

Your notes and bookmarks