usr/src/cmd/svc/milestone/process-security.xml

   1 <?xml version='1.0'?>
   2 <!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>
   3
   4 <!--
   5  Copyright 2015, Richard Lowe.
   6
   7  CDDL HEADER START
   8
   9  This file and its contents are supplied under the terms of the
  10  Common Development and Distribution License ("CDDL"), version 1.0.
  11  You may only use this file in accordance with the terms of version
  12  1.0 of the CDDL.
  13
  14  A full copy of the text of the CDDL should have accompanied this
  15  source.  A copy of the CDDL is also available via the Internet at
  16  http://www.illumos.org/license/CDDL.
  17
  18  CDDL HEADER END
  19
  20         NOTE:  This service manifest is not editable; its contents will
  21         be overwritten by package or patch operations, including
  22         operating system upgrade.  Make customizations in a different
  23         file.
  24 -->
  25
  26 <service_bundle type="manifest" name="process-security">
  27         <service name="system/process-security" type="service" version="1">
  28                 <!-- Initial state of the service is disabled -->
  29                 <create_default_instance enabled="false" />
  30
  31                 <single_instance />
  32
  33                 <!-- We don't actually have any methods, but we create a
  34                      default instance so that we show up in svcs -a -->
  35
  36                 <exec_method type="method" name="start" exec=":true" timeout_seconds="0"/>
  37                 <exec_method type="method" name="stop" exec=":true" timeout_seconds="30"/>
  38
  39                 <property_group name='startd' type='framework'>
  40                   <propval name='duration' type='astring' value='transient' />
  41                 </property_group>
  42
  43                 <property_group name='default' type='application'>
  44                   <property name='aslr' type='boolean' />
  45                   <property name='forbidnullmap' type='boolean' />
  46                   <property name='noexecstack' type='boolean' />
  47
  48                   <propval name='value_authorization' type='astring'
  49                            value='solaris.smf.value.process-security' />
  50                 </property_group>
  51
  52                 <property_group name='lower' type='application'>
  53                   <property name='aslr' type='boolean' />
  54                   <property name='forbidnullmap' type='boolean' />
  55                   <property name='noexecstack' type='boolean' />
  56
  57                   <propval name='value_authorization' type='astring'
  58                            value='solaris.smf.value.process-security' />
  59                 </property_group>
  60
  61                 <property_group name='upper' type='application'>
  62                   <property name='aslr' type='boolean' />
  63                   <property name='forbidnullmap' type='boolean' />
  64                   <property name='noexecstack' type='boolean' />
  65
  66                   <propval name='value_authorization' type='astring'
  67                            value='solaris.smf.value.process-security' />
  68                 </property_group>
  69
  70
  71
  72                 <stability value="Unstable" />
  73
  74                 <template>
  75                         <common_name>
  76                                 <loctext xml:lang='C'>Security Flag Configuration</loctext>
  77                         </common_name>
  78                         <documentation>
  79                                 <manpage title='security-flags' section='5'
  80                                          manpath='/usr/share/man' />
  81                                 <manpage title='psecflags' section='1'
  82                                          manpath='/usr/share/man' />
  83                         </documentation>
  84                 </template>
  85         </service>
  86 </service_bundle>