Print this page




  20 
  21  CDDL HEADER END
  22 
  23  Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
  24  Copyright 2015, Joyent, Inc.
  25 
  26  DO NOT EDIT THIS FILE.
  27 -->
  28 
  29 <!DOCTYPE brand PUBLIC "-//Sun Microsystems Inc//DTD Brands//EN"
  30     "file:///usr/share/lib/xml/dtd/brand.dtd.1">
  31 
  32 <brand name="lx">
  33         <modname>lx_brand</modname>
  34 
  35         <initname>/native/usr/lib/brand/lx/lxinit</initname>
  36         <login_cmd>/bin/login -h zone:%Z %u</login_cmd>
  37         <forcedlogin_cmd>/bin/login -h zone:%Z -f %u</forcedlogin_cmd>
  38         <user_cmd>/usr/bin/getent passwd %u</user_cmd>
  39 
  40         <install>/usr/lib/brand/lx/lx_install %z %R</install>
  41         <installopts>d:hsvX</installopts>
  42         <boot>/usr/lib/brand/lx/lx_boot %z %R</boot>
  43         <halt>/usr/lib/brand/lx/lx_support halt %R %z</halt>
  44         <verify_cfg>/usr/lib/brand/lx/lx_support verify</verify_cfg>
  45         <verify_adm></verify_adm>
  46         <postclone></postclone>
  47         <postinstall></postinstall>
  48 
  49         <privilege set="default" name="contract_event" />
  50         <privilege set="default" name="contract_identity" />
  51         <privilege set="default" name="contract_observer" />
  52         <privilege set="default" name="dtrace_proc" />
  53         <privilege set="default" name="dtrace_user" />
  54         <privilege set="default" name="file_chown" />
  55         <privilege set="default" name="file_chown_self" />
  56         <privilege set="default" name="file_dac_execute" />
  57         <privilege set="default" name="file_dac_read" />
  58         <privilege set="default" name="file_dac_search" />
  59         <privilege set="default" name="file_dac_write" />
  60         <privilege set="default" name="file_owner" />
  61         <privilege set="default" name="file_setid" />
  62         <privilege set="default" name="ipc_dac_read" />
  63         <privilege set="default" name="ipc_dac_write" />
  64         <privilege set="default" name="ipc_owner" />
  65         <privilege set="default" name="net_bindmlp" />
  66         <privilege set="default" name="net_icmpaccess" />
  67         <privilege set="default" name="net_mac_aware" />
  68         <privilege set="default" name="net_privaddr" />
  69         <privilege set="default" name="net_rawaccess" ip-type="exclusive" />
  70         <privilege set="default" name="proc_chroot" />
  71         <privilege set="default" name="sys_audit" />
  72         <privilege set="default" name="proc_audit" />

  73         <privilege set="default" name="proc_lock_memory" />
  74         <privilege set="default" name="proc_owner" />
  75         <privilege set="default" name="proc_setid" />
  76         <privilege set="default" name="proc_prioup" />
  77         <privilege set="default" name="proc_taskid" />
  78         <privilege set="default" name="sys_acct" />
  79         <privilege set="default" name="sys_admin" />
  80         <privilege set="default" name="sys_ip_config" ip-type="exclusive" />
  81         <privilege set="default" name="sys_iptun_config" ip-type="exclusive" />
  82         <privilege set="default" name="sys_mount" />
  83         <privilege set="default" name="sys_nfs" />
  84         <privilege set="default" name="sys_resource" />
  85         <privilege set="default" name="sys_ppp_config" ip-type="exclusive" />
  86 
  87         <privilege set="prohibited" name="dtrace_kernel" />
  88         <privilege set="prohibited" name="proc_zone" />
  89         <privilege set="prohibited" name="sys_config" />
  90         <privilege set="prohibited" name="sys_devices" />
  91         <privilege set="prohibited" name="sys_ip_config" ip-type="shared" />
  92         <privilege set="prohibited" name="sys_linkdir" />


  20 
  21  CDDL HEADER END
  22 
  23  Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
  24  Copyright 2015, Joyent, Inc.
  25 
  26  DO NOT EDIT THIS FILE.
  27 -->
  28 
  29 <!DOCTYPE brand PUBLIC "-//Sun Microsystems Inc//DTD Brands//EN"
  30     "file:///usr/share/lib/xml/dtd/brand.dtd.1">
  31 
  32 <brand name="lx">
  33         <modname>lx_brand</modname>
  34 
  35         <initname>/native/usr/lib/brand/lx/lxinit</initname>
  36         <login_cmd>/bin/login -h zone:%Z %u</login_cmd>
  37         <forcedlogin_cmd>/bin/login -h zone:%Z -f %u</forcedlogin_cmd>
  38         <user_cmd>/usr/bin/getent passwd %u</user_cmd>
  39 
  40         <install>/usr/lib/brand/lx/lx_install -z %z -R %R</install>
  41         <installopts>s:</installopts>
  42         <boot>/usr/lib/brand/lx/lx_boot %z %R</boot>
  43         <halt>/usr/lib/brand/lx/lx_support halt %R %z</halt>
  44         <verify_cfg>/usr/lib/brand/lx/lx_support verify</verify_cfg>
  45         <verify_adm></verify_adm>
  46         <postclone></postclone>
  47         <postinstall></postinstall>
  48 
  49         <privilege set="default" name="contract_event" />
  50         <privilege set="default" name="contract_identity" />
  51         <privilege set="default" name="contract_observer" />
  52         <privilege set="default" name="dtrace_proc" />
  53         <privilege set="default" name="dtrace_user" />
  54         <privilege set="default" name="file_chown" />
  55         <privilege set="default" name="file_chown_self" />
  56         <privilege set="default" name="file_dac_execute" />
  57         <privilege set="default" name="file_dac_read" />
  58         <privilege set="default" name="file_dac_search" />
  59         <privilege set="default" name="file_dac_write" />
  60         <privilege set="default" name="file_owner" />
  61         <privilege set="default" name="file_setid" />
  62         <privilege set="default" name="ipc_dac_read" />
  63         <privilege set="default" name="ipc_dac_write" />
  64         <privilege set="default" name="ipc_owner" />
  65         <privilege set="default" name="net_bindmlp" />
  66         <privilege set="default" name="net_icmpaccess" />
  67         <privilege set="default" name="net_mac_aware" />
  68         <privilege set="default" name="net_privaddr" />
  69         <privilege set="default" name="net_rawaccess" ip-type="exclusive" />
  70         <privilege set="default" name="proc_chroot" />
  71         <privilege set="default" name="sys_audit" />
  72         <privilege set="default" name="proc_audit" />
  73         <privilege set="default" name="proc_clock_highres" />
  74         <privilege set="default" name="proc_lock_memory" />
  75         <privilege set="default" name="proc_owner" />
  76         <privilege set="default" name="proc_setid" />
  77         <privilege set="default" name="proc_prioup" />
  78         <privilege set="default" name="proc_taskid" />
  79         <privilege set="default" name="sys_acct" />
  80         <privilege set="default" name="sys_admin" />
  81         <privilege set="default" name="sys_ip_config" ip-type="exclusive" />
  82         <privilege set="default" name="sys_iptun_config" ip-type="exclusive" />
  83         <privilege set="default" name="sys_mount" />
  84         <privilege set="default" name="sys_nfs" />
  85         <privilege set="default" name="sys_resource" />
  86         <privilege set="default" name="sys_ppp_config" ip-type="exclusive" />
  87 
  88         <privilege set="prohibited" name="dtrace_kernel" />
  89         <privilege set="prohibited" name="proc_zone" />
  90         <privilege set="prohibited" name="sys_config" />
  91         <privilege set="prohibited" name="sys_devices" />
  92         <privilege set="prohibited" name="sys_ip_config" ip-type="shared" />
  93         <privilege set="prohibited" name="sys_linkdir" />