components/ntp/Solaris/ntp.xml
changeset 5962 cb383b2a2d0a
parent 5007 0052258cbb9d
child 7414 8853dcba5eb8
--- a/components/ntp/Solaris/ntp.xml	Mon May 09 19:08:13 2016 -0700
+++ b/components/ntp/Solaris/ntp.xml	Mon May 09 19:08:13 2016 -0700
@@ -20,7 +20,7 @@
 
  CDDL HEADER END
 
- Copyright (c) 2009, 2015, Oracle and/or its affiliates. All rights reserved.
+ Copyright (c) 2009, 2016, Oracle and/or its affiliates. All rights reserved.
 
  NOTE:  This service manifest is not editable; its contents will
  be overwritten by package or patch operations, including
@@ -74,9 +74,10 @@
     	    timeout_seconds='600'>
 		<method_context>
 			<method_credential
-			    user='root'
-			    group='root'
-			    privileges='basic,!file_link_any,!proc_info,!proc_session,net_privaddr,proc_lock_memory,sys_time'
+			    user='daemon'
+			    group='daemon'
+			    privileges=
+'basic,!file_link_any,!proc_info,!proc_session,!sys_ib_info,!dax_access,net_privaddr,proc_lock_memory,sys_time,{file_write}:/tmp/*,{zone}:/var/ntp/*,{zone}:/system/volatile/ntp.pid,{file_dac_read,file_dac_search}:/etc/inet/*'
 			/>
 		</method_context>
 	</exec_method>
@@ -88,9 +89,10 @@
     	    timeout_seconds='1800'>
 		<method_context>
 			<method_credential
-			    user='root'
-			    group='root'
-			    privileges='basic,!file_link_any,!proc_info,!proc_session,net_privaddr,proc_lock_memory,sys_time'
+			    user='daemon'
+			    group='daemon'
+			    privileges=
+'basic,!file_link_any,!proc_info,!proc_session,!sys_ib_info,!dax_access,net_privaddr,proc_lock_memory,sys_time,{file_write}:/tmp/*,{zone}:/var/ntp/*,{zone}:/system/volatile/ntp.pid,{file_dac_read,file_dac_search}:/etc/inet/*'
 			/>
 		</method_context>
 	</exec_method>