Print this page
7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.


 442     a method_profile or method_credential element.
 443 
 444     Its attributes are
 445 
 446      working_directory The home directory to launch the method from.
 447           ":default" can be used as a token to indicate use of the         user
 448 specified by the credential or profile specified.
 449 
 450      project   The project ID, in numeric or text form.  ":default" can
 451           be used as a token to indicate use of the project           identified by
 452 getdefaultproj(3PROJECT) for the non-root         user specified by the
 453 credential or profile specified.        If the user is root, ":default"
 454 designates the project        the restarter is running in.
 455 
 456      resource_pool The resource pool name to launch the method on.
 457           ":default" can be used as a token to indicate use of the         pool
 458 specified in the project(4) entry given in the         "project" attribute
 459 above.  --> <!ELEMENT method_context      ( (method_profile |
 460 method_credential)?, method_environment? ) >
 461 
 462 <!ATTLIST method_context      working_directory        CDATA #IMPLIED      project
 463                CDATA #IMPLIED      resource_pool       CDATA #IMPLIED >

 464 
 465 <!-- Restarter delegation, methods, and      monitors -->
 466 
 467 <!--
 468   exec_method
 469 
 470     This element describes one of the methods used by the designated
 471     restarter to act on the service instance.  Its interpretation is
 472     left to the restarter to which a particular service instance is
 473     delegated.  It contains a set of attributes, an optional method
 474     context, and an optional stability element for the optional
 475     properties that can be included.
 476 
 477     Its attributes are
 478 
 479      type The type of method, either "method" or "monitor".
 480 
 481      name Name of this execution method.  The method names are        usually
 482 a defined interface of the restarter to which an       instance of this
 483 service is delegated.




 442     a method_profile or method_credential element.
 443 
 444     Its attributes are
 445 
 446      working_directory The home directory to launch the method from.
 447           ":default" can be used as a token to indicate use of the         user
 448 specified by the credential or profile specified.
 449 
 450      project   The project ID, in numeric or text form.  ":default" can
 451           be used as a token to indicate use of the project           identified by
 452 getdefaultproj(3PROJECT) for the non-root         user specified by the
 453 credential or profile specified.        If the user is root, ":default"
 454 designates the project        the restarter is running in.
 455 
 456      resource_pool The resource pool name to launch the method on.
 457           ":default" can be used as a token to indicate use of the         pool
 458 specified in the project(4) entry given in the         "project" attribute
 459 above.  --> <!ELEMENT method_context      ( (method_profile |
 460 method_credential)?, method_environment? ) >
 461 
 462 <!ATTLIST method_context      security_flags   CDATA #IMPLIED
 463      working_directory   CDATA #IMPLIED      project             CDATA #IMPLIED
 464      resource_pool       CDATA #IMPLIED >
 465 
 466 <!-- Restarter delegation, methods, and      monitors -->
 467 
 468 <!--
 469   exec_method
 470 
 471     This element describes one of the methods used by the designated
 472     restarter to act on the service instance.  Its interpretation is
 473     left to the restarter to which a particular service instance is
 474     delegated.  It contains a set of attributes, an optional method
 475     context, and an optional stability element for the optional
 476     properties that can be included.
 477 
 478     Its attributes are
 479 
 480      type The type of method, either "method" or "monitor".
 481 
 482      name Name of this execution method.  The method names are        usually
 483 a defined interface of the restarter to which an       instance of this
 484 service is delegated.