1Z0-822 · Question #156
You administer an Oracle Solaris 11 server with multiple zones. You want to configure it so that all nonprivileged users in the global zone see only their own process. What must you do to make the…
The correct answer is B. Modify the basic privilege ser in the /etc/security/policy.conf file. policy.conf - configuration file for security policy. The policy.conf file provides the security policy configuration for user-level attributes. * Example: Modifying Every User's Basic Privilege Set In this example, the security administrator of a large Sun Ray installation…
Question
You administer an Oracle Solaris 11 server with multiple zones. You want to configure it so that all nonprivileged users in the global zone see only their own process. What must you do to make the change?
Options
- AModify the LIMITPRIV variable in the /etc/usr/user_attr file.
- BModify the basic privilege ser in the /etc/security/policy.conf file.
- CConfigure the priv= attribute in the /etc/security/prof_attr.d/core-os file.
- DConfigure privileges for the ps command in the /etc/security/exec_attrd/core-os file.
How the community answered
(26 responses)- A8% (2)
- B62% (16)
- C12% (3)
- D19% (5)
Explanation
policy.conf - configuration file for security policy. The policy.conf file provides the security policy configuration for user-level attributes. * Example: Modifying Every User's Basic Privilege Set In this example, the security administrator of a large Sun Ray installation does not want regular users to view the processes of other Sun Ray users. Therefore, on every system that is configured with Trusted Extensions, the root role removes proc_info from the basic set of privileges. The PRIV_DEFAULT setting in the /etc/policy.conf file is uncommented and modified PRIV_DEFAULT=basic,!proc_info
Topics
Community Discussion
No community discussion yet for this question.