Configuring auditing for select files in Oracle Solaris 11.4

Besides finding performance problems on customer systems, one of my favorite topics is security. Thus I’m talking a lot with customer how to implement something in Solaris in relation to...

Adding datasets to running zones

Sometimes you need to have a new ZFS dataset in your zone because, you want to install a new application or a new instance of an application in it which...

A brief history of the admins time

Again a rather short entry. Quite often one question is which privileged tasks the admins did on the system. Since 11.4 there is a simple command to find out. The...

Periodic scrubs revisited

There were a number of questions how you control at which time you do a scrub, as some considered it as a bad idea to start a scrub during business...

You don't always see what you want (... and how you configure it in Solaris)

Consider the following situation: You are tasked to update an application, to stop it, to start it, to change it’s configuration. You need access to the config files, to the...

11.4.6.0, the number of the SRU

This days blog entry is only a short one. It’s a feature from the “at last”-department. Until Solaris 11.4 it always uncessary indirect to find out which SRU you are...

Labeled Sandboxes

One of the reasons why I was that silent here the last year even when Solaris 11.4 was introduced was the situation, that my colleague Detlef Drewanz and I created...

Periodic scrubs of ZFS filesystems

It was and is always a best practice to do regular scrubs of your ZFS filesystems in order to ensure that all checksums … well … check out to ensure...

Memory Reservation Pools in Oracle Solaris 11.4 SRU1

There is a rare sitation that prohibits you to boot or reboot a Kernel Zone. In order to happen, you need to have a massively loaded system and a lot...

Filesystem latencies with fsstat.

After my blog entry about showing latencies at disk level, I want to highlight another tool that is now able to display latencies, just somewhat up the layers (or layer,...

Latency distribution with iostat

Sometimes a new feature is not about something that wasn’t possible before, but about making data already available more accessible. Like that information you gathered so far with Dtrace and...

Database performance overview for Solaris 11.4 SRU6

You may already know the System Web Interface that Oracle introduced with Solaris 11.4. It’s a graphical interface to performance data on a system. In SRU6 a really cool sheet...

LKSF: Audit Annotations

For several major releases Solaris has a really extensive auditing subsystem. I wrote about it many years ago (11 years to be exact) in Less known Solaris features: Auditing. The...

802.1x authentication in Solaris 11.4 beta

In Solaris 11.4 beta there is finally 802.1x authentication for wired network connections. While the man page describes, how you setup 802.1x with EAP-TLS with Solaris 11.4 beta, there is...

Remote security assessments in Solaris 11.4 beta

There is a framework to check your system against security rulesets in Solaris 11 for quite some time now. It’s really useful: You can define your own rulesets, but more...

pam_fm_notify

While many Solaris admins are aware of the Fault Management Architecture inside of Solaris, it’s often not a natural habit to them to look at the output of fmlist just...

RADIUS authentication in Oracle Solaris 11.4 Beta

In the first refresh of the Oracle Solaris 11.4 beta we got support for RADIUS in the PAM framework. So you can now use RADIUS for authentication purposes without the...

Presentation of the Oracle Solaris 11.4 Beta Business Breakfast

A while ago i’ve held a number of presentations about Solaris 11.4 beta. Since that time i’ve got some questions where you can get the slide. They are available for...

How I learned to stop worrying and love being a passenger ...

I will have flown the 500th time soon. I will have half a million kilometers in aircrafts under my belt if you calculate it just with the great circle distance....

Event Announcement: Oracle Business Breakfast about Oracle Solaris 11.4

As the event is in german language, the following announcement is in german language as well. Sorry!. Oracle Solaris 11.4 beta wurde soeben veröffentlicht. Nun möchte ich natürlich auch die...