|
Description
|
vermillion 45 + TJDS + TX on snv_43
Log in as zone-test1
/etc/user_attr
zone-test1::::lock_after_retries=no;profiles=User Management;labelview=internal,showsl;min_label=admin_low;clearance=admin_high;type=normal;roles=root;auths=solaris.label.file.*,solaris.label.win.*,solaris.device.allocate,solaris.*,win_upgrade_sl,win_downgrade_sl,file_updgrade_sl,file_downgrade_sl,win_mac_read,win_mac_write,file_dac_read,file_dac_write
(Note 6421890 - xscreensaver not in default PATH)
Log into multi labeled session.
In global zone ps -efZ | grep xscreensaver - running in global zone
In e.g. the public zone, launch xscreensaver-demo, select File, Restart Daemon
ps -efZ | grep xscreensaver - in global zone - xscreensaver is not running any more.
Restart the screensaver from the public, zone and lock the sceen.
Now it is not possible to unlock the sceen
note, when xscreensaver-demo is launched from the preferences menu, it launches in the trusted path - it only launches in the labeled zone (e.g. public) when launched froma terminal in that zone.
|