LGTM.

-Drew

On 4/26/12 8:03 AM, Matt Keenan wrote:
Hi,

Can I get a pair of eyes on following fix :
  7155912 : audit warnings during AI of s11u1_12
  http://monaco.us.oracle.com/detail.jsf?cr=7155912

Webrev inline as quite small :

diff -r dcba9e098fc4 usr/src/cmd/distro_const/profile/generic.xml
--- a/usr/src/cmd/distro_const/profile/generic.xml Wed Apr 25 12:10:53 2012 -0700 +++ b/usr/src/cmd/distro_const/profile/generic.xml Thu Apr 26 12:00:59 2012 +0100
@@ -28,6 +28,9 @@
<!--
       svc.startd(1M) services
   -->
+ <service name='system/auditd' version='1' type='service'>
+ <instance name='default' enabled='false'/>
+ </service>
<service name='system/boot-archive-update' version='1' type='service'>
<instance name='default' enabled='false'/>
</service>


Solution:
Ensure all install media have SMF service system/auditd disabled by default as confirmed by security as being OK.

Tested AI & TI installs and ensured no audit warnings are seen during install. Ensured that on first boot SMF system/auditd is enabled as it should be on live systems by default.

GUI install test in progress, happily installing at 25% so far.


cheers

Matt
_______________________________________________
caiman-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/caiman-discuss
_______________________________________________
caiman-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/caiman-discuss

Reply via email to