Although already present for months in the Sun's OpenSolaris distribution, the new Secure By Default Network Profile feature is now available with the 11/06 update of the official Solaris release.
If you didn't get it through a fresh install, you can turn it on using
the provided shell script (as
/usr/sbin/netservices). It all works
well, except in our case (at work) we want to be able to do remote
display on X11. So, we use this quickly-written script in order to be
able to do so easily:
# cat /tmp/svc.netservices #!/usr/bin/env sh echo "Setting the limited SMF configuration..." netservices limited echo "Setting the open form of x11-server..." svccfg -s x11-server setprop options/tcp_listen = boolean: true echo "Setting the open form of cde-login..." svccfg -s cde-login setprop dtlogin/args = "\"\"" echo "Refresh the cde-login SMF service..." svcadm refresh cde-login echo "Restarting the SMF services..." svcadm restart cde-login exit 0
Hope this help... at least, it will be an online-memo for us!