1 <?xml version="1.0"?>
   2 <!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
   3 <!--
   4  Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
   5  Copyright 2016 Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
   6 
   7  CDDL HEADER START
   8 
   9  The contents of this file are subject to the terms of the
  10  Common Development and Distribution License (the "License").
  11  You may not use this file except in compliance with the License.
  12 
  13  You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  14  or http://www.opensolaris.org/os/licensing.
  15  See the License for the specific language governing permissions
  16  and limitations under the License.
  17 
  18  When distributing Covered Code, include this CDDL HEADER in each
  19  file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  20  If applicable, add the following below this CDDL HEADER, with the
  21  fields enclosed by brackets "[]" replaced with your own identifying
  22  information: Portions Copyright [yyyy] [name of copyright owner]
  23 
  24  CDDL HEADER END
  25 
  26         NOTE:  This service manifest is not editable; its contents will
  27         be overwritten by package or patch operations, including
  28         operating system upgrade.  Make customizations in a different
  29         file.
  30 -->
  31 
  32 <service_bundle type='manifest' name='SUNWcsr:global'>
  33 
  34 <service
  35         name='system/svc/global'
  36         type='service'
  37         version='1'>
  38 
  39         <!--
  40             There's no running configuration to manage here.  However,
  41             this service stores the system-wide definitions for
  42             templates.
  43         -->
  44 
  45         <create_default_instance enabled='false' />
  46 
  47         <single_instance/>
  48 
  49         <exec_method
  50                 type='method'
  51                 name='start'
  52                 exec=':true'
  53                 timeout_seconds='0' />
  54 
  55         <exec_method
  56                 type='method'
  57                 name='stop'
  58                 exec=':true'
  59                 timeout_seconds='0' />
  60 
  61         <stability value='Unstable' />
  62 
  63         <template>
  64                 <common_name>
  65                         <loctext xml:lang='C'>
  66 system-wide configuration definitions
  67                         </loctext>
  68                 </common_name>
  69                 <documentation>
  70                         <manpage title='smf' section='5'
  71                             manpath='/usr/share/man' />
  72                         <manpage title='smf_template' section='5'
  73                             manpath='/usr/share/man' />
  74                 </documentation>
  75 
  76                 <pg_pattern name='general' type='framework'
  77                     target='all' required='true'>
  78                         <description>
  79                                 <loctext xml:lang='C'>
  80 Basic information about a service instance which is supplied by the service author, sometimes modified by the administrator, and consumed by SMF and the service's restarter.
  81                                 </loctext>
  82                         </description>
  83                         <prop_pattern name='enabled' type='boolean'
  84                             required='true'>
  85                                 <description>
  86                                         <loctext xml:lang='C'>
  87 The service instance is expected to be started once all of its dependencies are satisfied.  If this property is not defined, the restarter will not be notified about this service instance.
  88                                         </loctext>
  89                                 </description>
  90                                 <cardinality min='1' max='1'/>
  91                         </prop_pattern>
  92                         <prop_pattern name='restarter' type='fmri'
  93                             required='false'>
  94                                 <description>
  95                                         <loctext xml:lang='C'>
  96 The restarter responsible for managing this service instance.  If the property is unset, the default restarter, svc.startd, is assumed.
  97                                         </loctext>
  98                                 </description>
  99                                 <cardinality min='1' max='1'/>
 100                         </prop_pattern>
 101                         <prop_pattern name='single_instance' type='boolean'
 102                             required='false'>
 103                                 <description>
 104                                         <loctext xml:lang='C'>
 105 Only one instance of this service may be run.  This property is currently unenforced, but will be at some point in the future.
 106                                         </loctext>
 107                                 </description>
 108                                 <cardinality min='1' max='1'/>
 109                         </prop_pattern>
 110                 </pg_pattern>
 111 
 112                 <pg_pattern type='dependency' target='all' required='false'>
 113                         <description>
 114                                 <loctext xml:lang='C'>
 115 A dependency declares a required condition for a service instance to start or stay running.  It is defined by the service author and consumed by SMF.
 116                                 </loctext>
 117                         </description>
 118                         <prop_pattern name='entities' type='fmri'
 119                             required='true'>
 120                                 <description>
 121                                         <loctext xml:lang='C'>
 122 The services, service instances, or files used to calculate this dependency.
 123                                         </loctext>
 124                                 </description>
 125                                 <cardinality min='1'/>
 126                         </prop_pattern>
 127                         <prop_pattern name='external' type='boolean'>
 128                                 <description>
 129                                         <loctext xml:lang='C'>
 130 This dependency was declared by the service defined in entities.  It will be removed only when that service is deleted.
 131                                         </loctext>
 132                                 </description>
 133                                 <visibility value='readonly'/>
 134                                 <cardinality min='1' max='1'/>
 135                         </prop_pattern>
 136                         <prop_pattern name='grouping' type='astring'
 137                             required='true'>
 138                                 <description>
 139                                         <loctext xml:lang='C'>
 140 How to decide whether this dependency is satisfied.
 141                                         </loctext>
 142                                 </description>
 143                                 <cardinality min='1' max='1'/>
 144                                 <constraints>
 145                                 <value name='require_all'>
 146                                         <description>
 147                                                 <loctext xml:lang='C'>
 148 Satisfied when all cited services are running (online or degraded), or when all indicated files are present.
 149                                                 </loctext>
 150                                         </description>
 151                                 </value>
 152                                 <value name='require_any'>
 153                                         <description>
 154                                                 <loctext xml:lang='C'>
 155 Satisfied when one of the cited services is running (online or degraded), or when at least one of the indicated files is present.
 156                                                 </loctext>
 157                                         </description>
 158                                 </value>
 159                                 <value name='optional_all'>
 160                                         <description>
 161                                                 <loctext xml:lang='C'>
 162 Satisfied if the cited services are running (online or degraded) or will not run without administrative action (disabled, maintenance, not present, or offline waiting for dependencies which will not start without administrative action).
 163 
 164                                                 </loctext>
 165                                         </description>
 166                                 </value>
 167                                 <value name='exclude_all'>
 168                                         <description>
 169                                                 <loctext xml:lang='C'>
 170 Satisfied when all of the cited services are disabled, in the maintenance state, or when cited services or files are not present.
 171                                                 </loctext>
 172                                         </description>
 173                                 </value>
 174                                 </constraints>
 175                                 <choices>
 176                                         <include_values type='constraints'/>
 177                                 </choices>
 178                         </prop_pattern>
 179                         <prop_pattern name='restart_on' type='astring'
 180                             required='true'>
 181                                 <description>
 182                                         <loctext xml:lang='C'>
 183 Determines whether to restart the service due to a dependency refresh, restart, or failure.
 184                                         </loctext>
 185                                 </description>
 186                                 <cardinality min='1' max='1'/>
 187                                 <constraints>
 188                                 <value name='none'>
 189                                         <description>
 190                                                 <loctext xml:lang='C'>
 191 Never restart due to dependency refresh, restart, or failure.
 192                                                 </loctext>
 193                                         </description>
 194                                 </value>
 195                                 <value name='error'>
 196                                         <description>
 197                                                 <loctext xml:lang='C'>
 198 Restart only if the dependency encounters an error, such as an uncorrectable hardware error, or a software error such as a core dump.
 199                                                 </loctext>
 200                                         </description>
 201                                 </value>
 202                                 <value name='restart'>
 203                                         <description>
 204                                                 <loctext xml:lang='C'>
 205 Restart if the dependency encounters an error or is explicitly restarted.
 206                                                 </loctext>
 207                                         </description>
 208                                 </value>
 209                                 <value name='refresh'>
 210                                         <description>
 211                                                 <loctext xml:lang='C'>
 212 Restart if the dependency encounters an error, is explicitly restarted, or explicitly refreshed.
 213                                                 </loctext>
 214                                         </description>
 215                                 </value>
 216                                 </constraints>
 217                                 <choices>
 218                                         <include_values type='constraints'/>
 219                                 </choices>
 220                         </prop_pattern>
 221                         <prop_pattern name='type' type='astring'
 222                             required='true'>
 223                                 <description>
 224                                         <loctext xml:lang='C'>
 225 The type of the dependency: service or file.
 226                                         </loctext>
 227                                 </description>
 228                                 <cardinality min='1' max='1'/>
 229                                 <constraints>
 230                                 <value name='service'>
 231                                         <description>
 232                                                 <loctext xml:lang='C'>
 233 Depend on services or instances.
 234                                                 </loctext>
 235                                         </description>
 236                                 </value>
 237                                 <value name='path'>
 238                                         <description>
 239                                                 <loctext xml:lang='C'>
 240 Depend on the existance of a file path.
 241                                                 </loctext>
 242                                         </description>
 243                                 </value>
 244                                 </constraints>
 245                                 <choices>
 246                                         <include_values type='constraints'/>
 247                                 </choices>
 248                         </prop_pattern>
 249                 </pg_pattern>
 250 
 251                 <pg_pattern type='template_pg_pattern' target='all'
 252                     required='false'>
 253                         <description>
 254                                 <loctext xml:lang='C'>
 255 Template data about property groups.  This information is provided in the manifest by the service author and should not be modified directly.
 256                                 </loctext>
 257                         </description>
 258 
 259                         <prop_pattern name='name' type='astring'
 260                             required='false'>
 261                                 <description>
 262                                         <loctext xml:lang='C'>
 263 Optional name of a property group which is described by this template.  No name means the name is wildcarded.
 264                                         </loctext>
 265                                 </description>
 266                                 <visibility value='hidden'/>
 267                                 <cardinality min='1' max='1'/>
 268                         </prop_pattern>
 269                         <prop_pattern name='type' type='astring'
 270                             required='false'>
 271                                 <description>
 272                                         <loctext xml:lang='C'>
 273 Optional type of property groups which are described by this template.  No type means that the type is wildcarded.
 274                                         </loctext>
 275                                 </description>
 276                                 <visibility value='hidden'/>
 277                                 <cardinality min='1' max='1'/>
 278                         </prop_pattern>
 279                         <prop_pattern name='required' type='boolean'
 280                             required='false'>
 281                                 <description>
 282                                         <loctext xml:lang='C'>
 283 If true, entities without a property group which matches this pattern are considered invalid.
 284                                         </loctext>
 285                                 </description>
 286                                 <visibility value='hidden'/>
 287                                 <cardinality min='1' max='1'/>
 288                         </prop_pattern>
 289                         <prop_pattern name='target' type='astring'
 290                             required='false'>
 291                                 <description>
 292                                         <loctext xml:lang='C'>
 293 The services or service instances to which this template should be applied.
 294                                         </loctext>
 295                                 </description>
 296                                 <visibility value='hidden'/>
 297                                 <cardinality min='1' max='1'/>
 298                                 <constraints>
 299                                 <value name='this'>
 300                                         <description>
 301                                                 <loctext xml:lang='C'>
 302 The service or instance on which the property group resides.
 303                                                 </loctext>
 304                                         </description>
 305                                 </value>
 306                                 <value name='instance'>
 307                                         <description>
 308                                                 <loctext xml:lang='C'>
 309 This instance, or any instance of this service.
 310                                                 </loctext>
 311                                         </description>
 312                                 </value>
 313                                 <value name='delegate'>
 314                                         <description>
 315                                                 <loctext xml:lang='C'>
 316 All instances which currently define this service as their restarter.
 317                                                 </loctext>
 318                                         </description>
 319                                 </value>
 320                                 <value name='all'>
 321                                         <description>
 322                                                 <loctext xml:lang='C'>
 323 All services and instances on the system.  "all" may only be set on the global service.
 324                                                 </loctext>
 325                                         </description>
 326                                 </value>
 327                                 </constraints>
 328                         </prop_pattern>
 329                 </pg_pattern>
 330 
 331                 <pg_pattern type='template_prop_pattern' target='all'
 332                     required='false'>
 333                         <description>
 334                                 <loctext xml:lang='C'>
 335 Template data about properties.  This information is provided in the manifest by the service author and should not be modified directly.
 336                                 </loctext>
 337                         </description>
 338                         <prop_pattern name='name' type='astring'
 339                             required='true'>
 340                                 <description>
 341                                         <loctext xml:lang='C'>
 342 Name of property this template applies to.
 343                                         </loctext>
 344                                 </description>
 345                                 <visibility value='hidden'/>
 346                                 <cardinality min='1' max='1'/>
 347                         </prop_pattern>
 348                         <prop_pattern name='pg_pattern' type='astring'
 349                             required='true'>
 350                                 <description>
 351                                         <loctext xml:lang='C'>
 352 Name of property group that describes the enclosing property group pattern.
 353                                         </loctext>
 354                                 </description>
 355                                 <visibility value='hidden'/>
 356                                 <cardinality min='1' max='1'/>
 357                         </prop_pattern>
 358                         <prop_pattern name='required' type='boolean'
 359                             required='false'>
 360                                 <description>
 361                                         <loctext xml:lang='C'>
 362 Defines whether a property matched by this template is required.
 363                                         </loctext>
 364                                 </description>
 365                                 <visibility value='hidden'/>
 366                                 <cardinality min='1' max='1'/>
 367                         </prop_pattern>
 368                         <prop_pattern name='type' type='astring'
 369                             required='false'>
 370                                 <description>
 371                                         <loctext xml:lang='C'>
 372 The type that a property which this template refers to should be.
 373                                         </loctext>
 374                                 </description>
 375                                 <visibility value='hidden'/>
 376                                 <cardinality min='1' max='1'/>
 377                         </prop_pattern>
 378                         <prop_pattern name='visibility' type='astring'
 379                             required='false'>
 380                                 <description>
 381                                         <loctext xml:lang='C'>
 382 The visibility of this property, which is readwrite by default.  Visibility is only a cue to the user interface, and will not be explicitly enforced by SMF.
 383                                         </loctext>
 384                                 </description>
 385                                 <visibility value='hidden'/>
 386                                 <cardinality min='1' max='1'/>
 387                                 <constraints>
 388                                 <value name='hidden'>
 389                                         <description>
 390                                                 <loctext xml:lang='C'>
 391 Hidden in default user interface views.
 392                                                 </loctext>
 393                                         </description>
 394                                 </value>
 395                                 <value name='readonly'>
 396                                         <description>
 397                                                 <loctext xml:lang='C'>
 398 Expected to be read only in most user interfaces.
 399                                                 </loctext>
 400                                         </description>
 401                                 </value>
 402                                 <value name='readwrite'>
 403                                         <description>
 404                                                 <loctext xml:lang='C'>
 405 Expected to be manipulated in many user interfaces.
 406                                                 </loctext>
 407                                         </description>
 408                                 </value>
 409                                 </constraints>
 410                         </prop_pattern>
 411                         <prop_pattern name='cardinality_min' type='count'
 412                             required='false'>
 413                                 <description>
 414                                         <loctext xml:lang='C'>
 415 Minimum number of required values.
 416                                         </loctext>
 417                                 </description>
 418                                 <cardinality min='1' max='1'/>
 419                         </prop_pattern>
 420                         <prop_pattern name='cardinality_max' type='count'
 421                             required='false'>
 422                                 <description>
 423                                         <loctext xml:lang='C'>
 424 Maximum number of required values.
 425                                         </loctext>
 426                                 </description>
 427                                 <visibility value='hidden'/>
 428                                 <cardinality min='1' max='1'/>
 429                         </prop_pattern>
 430                         <prop_pattern name='internal_separators' type='astring'
 431                             required='false'>
 432                                 <description>
 433                                         <loctext xml:lang='C'>
 434 List of separator characters for values.
 435                                         </loctext>
 436                                 </description>
 437                                 <visibility value='hidden'/>
 438                                 <cardinality min='1'/>
 439                         </prop_pattern>
 440                         <prop_pattern name='constraint_name' type='astring'
 441                             required='false'>
 442                                 <description>
 443                                         <loctext xml:lang='C'>
 444 Values the property is expected to be constrained to.
 445                                         </loctext>
 446                                 </description>
 447                                 <visibility value='hidden'/>
 448                                 <cardinality min='1'/>
 449                         </prop_pattern>
 450                         <prop_pattern name='constraint_range' type='astring'
 451                             required='false'>
 452                                 <description>
 453                                         <loctext xml:lang='C'>
 454 Ranges the property is expected to be constrained to.
 455                                         </loctext>
 456                                 </description>
 457                                 <visibility value='hidden'/>
 458                                 <cardinality min='1'/>
 459                                 <internal_separators>,</internal_separators>
 460                         </prop_pattern>
 461                         <prop_pattern name='choices_range' type='astring'
 462                             required='false'>
 463                                 <description>
 464                                         <loctext xml:lang='C'>
 465 Ranges a user should be offered as a choice for this property.
 466                                         </loctext>
 467                                 </description>
 468                                 <visibility value='hidden'/>
 469                                 <cardinality min='1'/>
 470                                 <internal_separators>,</internal_separators>
 471                         </prop_pattern>
 472                         <prop_pattern name='choices_name' type='astring'
 473                             required='false'>
 474                                 <description>
 475                                         <loctext xml:lang='C'>
 476 Values a users should be offered as a choice for this property.
 477                                         </loctext>
 478                                 </description>
 479                                 <visibility value='hidden'/>
 480                                 <cardinality min='1'/>
 481                         </prop_pattern>
 482                         <prop_pattern name='choices_include_values'
 483                             type='astring' required='false'>
 484                                 <description>
 485                                         <loctext xml:lang='C'>
 486 Whether the choices should include the defined constraints or values.
 487                                         </loctext>
 488                                 </description>
 489                                 <visibility value='hidden'/>
 490                                 <cardinality min='1' max='1'/>
 491                                 <constraints>
 492                                 <value name='constraints'>
 493                                         <description>
 494                                                 <loctext xml:lang='C'>
 495 Include all defined constraints as choices.
 496                                                 </loctext>
 497                                         </description>
 498                                 </value>
 499                                 <value name='values'>
 500                                         <description>
 501                                                 <loctext xml:lang='C'>
 502 Include all defined values as choices.
 503                                                 </loctext>
 504                                         </description>
 505                                 </value>
 506                                 </constraints>
 507                         </prop_pattern>
 508                 </pg_pattern>
 509 
 510                 <pg_pattern name='method_context' type='framework'
 511                     target='all' required='false'>
 512                         <description>
 513                                 <loctext xml:lang='C'>
 514 Specifies the default execution context for all service methods.  It is defined by the service author, may be augmented by an administrator, and is consumed by the service's restarter.
 515                                 </loctext>
 516                         </description>
 517 
 518                         <!-- method_context direct properties -->
 519                         <prop_pattern name='working_directory' type='astring'
 520                             required='false'>
 521                                 <description>
 522                                         <loctext xml:lang='C'>
 523 The working directory to launch the method from.  ":default" can be used as a token to indicate the home directory of the user specified by the credential or profile.
 524                                         </loctext>
 525                                 </description>
 526                                 <cardinality min='1' max='1'/>
 527                         </prop_pattern>
 528                         <prop_pattern name='project' type='astring'
 529                             required='false'>
 530                                 <description>
 531                                         <loctext xml:lang='C'>
 532 The project ID in numeric or text form.  ":default" can be used as a token to indicate a project identified by getdefaultproj(3PROJECT) for the user whose uid is used to launch the method.
 533                                         </loctext>
 534                                 </description>
 535                                 <cardinality min='1' max='1'/>
 536                         </prop_pattern>
 537                         <prop_pattern name='resource_pool' type='astring'
 538                             required='false'>
 539                                 <description>
 540                                         <loctext xml:lang='C'>
 541 The resource pool name in which to launch the method.  ":default" can be used
 542 as a token to indicate the pool specified in the project(4) entry given in
 543 the project attribute.
 544                                         </loctext>
 545                                 </description>
 546                                 <cardinality min='1' max='1'/>
 547                         </prop_pattern>
 548                         <prop_pattern name='security_flags' type='astring'
 549                             required='false'>
 550                                 <description>
 551                                         <loctext xml:lang='C'>
 552 An optional string specifying the security flags as defined in security-flags(5).
 553                                         </loctext>
 554                                 </description>
 555                                 <cardinality min='1' max='1'/>
 556                         </prop_pattern>
 557 
 558                         <!-- method_credential properties -->
 559                         <prop_pattern name='user' type='astring'
 560                             required='false'>
 561                                 <description>
 562                                         <loctext xml:lang='C'>
 563 The user ID in numeric or text form.
 564                                         </loctext>
 565                                 </description>
 566                                 <cardinality min='1' max='1'/>
 567                         </prop_pattern>
 568                         <prop_pattern name='group' type='astring'
 569                             required='false'>
 570                                 <description>
 571                                         <loctext xml:lang='C'>
 572 The group ID in numeric or text form.
 573                                         </loctext>
 574                                 </description>
 575                                 <cardinality min='1' max='1'/>
 576                         </prop_pattern>
 577                         <prop_pattern name='supp_groups' type='astring'
 578                             required='false'>
 579                                 <description>
 580                                         <loctext xml:lang='C'>
 581 An optional string that specifies the supplemental group memberships by ID,
 582 in numeric or text form.
 583                                         </loctext>
 584                                 </description>
 585                                 <cardinality min='1' max='1'/>
 586                         </prop_pattern>
 587                         <prop_pattern name='privileges' type='astring'
 588                             required='false'>
 589                                 <description>
 590                                         <loctext xml:lang='C'>
 591 An optional string specifying the privilege set as defined in privileges(5).
 592                                         </loctext>
 593                                 </description>
 594                                 <cardinality min='1' max='1'/>
 595                         </prop_pattern>
 596                         <prop_pattern name='limit_privileges' type='astring'
 597                             required='false'>
 598                                 <description>
 599                                         <loctext xml:lang='C'>
 600 An optional string specifying the limit privilege set as defined in
 601 privileges(5).
 602                                         </loctext>
 603                                 </description>
 604                                 <cardinality min='1' max='1'/>
 605                         </prop_pattern>
 606 
 607                         <!-- method_profile properties -->
 608                         <prop_pattern name='use_profile' type='boolean'
 609                             required='false'>
 610                                 <description>
 611                                         <loctext xml:lang='C'>
 612 A boolean that specifies whether the profile should be used instead of the
 613 user, group, privileges, and limit_privileges properties.
 614                                         </loctext>
 615                                 </description>
 616                                 <cardinality min='1' max='1'/>
 617                         </prop_pattern>
 618                         <prop_pattern name='profile' type='astring'
 619                             required='false'>
 620                                 <description>
 621                                         <loctext xml:lang='C'>
 622 The name of an RBAC (role-based access control) profile which, along with the
 623 method executable, identifies an entry in exec_attr(4).
 624                                         </loctext>
 625                                 </description>
 626                                 <cardinality min='1' max='1'/>
 627                         </prop_pattern>
 628                 </pg_pattern>
 629 
 630                 <pg_pattern name='firewall_context'
 631                     type='com.sun,fw_definition' target='all' required='false'>
 632                         <common_name>
 633                                 <loctext xml:lang='C'>
 634 Static definition
 635                                 </loctext>
 636                         </common_name>
 637                         <description>
 638                                 <loctext xml:lang='C'>
 639 Service static network and firewall definition.
 640                                 </loctext>
 641                         </description>
 642                         <prop_pattern name='name' type='astring'
 643                             required='false'>
 644                                 <common_name>
 645                                         <loctext xml:lang='C'>
 646 Service name
 647                                         </loctext>
 648                                 </common_name>
 649                                 <description>
 650                                         <loctext xml:lang='C'>
 651 IANA name or RPC name for non-inetd service, equivalent to inetd/name property. For RPC services, the value of this property is not an IANA name but is either an RPC program number or name, see rpc(4).
 652                                         </loctext>
 653                                 </description>
 654                         </prop_pattern>
 655                         <prop_pattern name='isrpc' type='boolean'
 656                             required='false'>
 657                                 <common_name>
 658                                         <loctext xml:lang='C'>
 659 RPC service
 660                                         </loctext>
 661                                 </common_name>
 662                                 <description>
 663                                         <loctext xml:lang='C'>
 664 A boolean property where a "true" value indicates an RPC service, equivalent to inetd/isrpc property.
 665                                         </loctext>
 666                                 </description>
 667                         </prop_pattern>
 668                         <prop_pattern name='ipf_method' type='astring'
 669                             required='false'>
 670                                 <common_name>
 671                                         <loctext xml:lang='C'>
 672 Custom firewall script
 673                                         </loctext>
 674                                 </common_name>
 675                                 <description>
 676                                         <loctext xml:lang='C'>
 677 A script that generates ipf rules for a service. Services that require custom IPfilter configuration can use this mechanism to generate and supply their own ipf rules.  The firewall framework does not generate rules for services that has this property definition but expect these services to provide their own rules.
 678                                         </loctext>
 679                                 </description>
 680                         </prop_pattern> </pg_pattern>
 681 
 682                 <pg_pattern name='firewall_config'
 683                     type='com.sun,fw_configuration' target='all'
 684                     required='false'>
 685                         <common_name>
 686                                 <loctext xml:lang='C'>
 687 Firewall configuration
 688                                 </loctext>
 689                         </common_name>
 690                         <description>
 691                                 <loctext xml:lang='C'>
 692 Service firewall configuration.
 693                                 </loctext>
 694                         </description>
 695                         <prop_pattern name='policy' type='astring'
 696                             required='true'>
 697                                 <common_name>
 698                                         <loctext xml:lang='C'>
 699 Firewall policy
 700                                         </loctext>
 701                                 </common_name>
 702                                 <description>
 703                                         <loctext xml:lang='C'>
 704 Service firewall policy.
 705                                         </loctext>
 706                                 </description>
 707                                 <visibility value='readwrite'/>
 708                                 <cardinality min='1' max='1'/>
 709                                 <values>
 710                                         <value name='use_global'>
 711                                                 <description>
 712                                                         <loctext xml:lang='C'>
 713 Apply Global Default policy, specified in network/ipfilter for the service. This is the default value.
 714                                                         </loctext>
 715                                                 </description>
 716                                         </value>
 717                                         <value name='none'>
 718                                                 <description>
 719                                                         <loctext xml:lang='C'>
 720 No firewall (allow all).
 721                                                         </loctext>
 722                                                 </description>
 723                                         </value>
 724                                         <value name='deny'>
 725                                                 <description>
 726                                                         <loctext xml:lang='C'>
 727 Deny access to entities specified in 'apply_to' property.
 728                                                         </loctext>
 729                                                 </description>
 730                                         </value>
 731                                         <value name='allow'>
 732                                                 <description>
 733                                                         <loctext xml:lang='C'>
 734 Allow access to entities specified in 'apply_to' property.
 735                                                         </loctext>
 736                                                 </description>
 737                                         </value>
 738                                 </values>
 739                                 <choices>
 740                                         <include_values type='values'/>
 741                                 </choices>
 742                         </prop_pattern>
 743                         <prop_pattern name='block_policy' type='astring'
 744                             required='false'>
 745                                 <common_name>
 746                                         <loctext xml:lang='C'>
 747 Firewall block policy
 748                                         </loctext>
 749                                 </common_name>
 750                                 <description>
 751                                         <loctext xml:lang='C'>
 752 Service firewall block policy.
 753                                         </loctext>
 754                                 </description>
 755                                 <visibility value='readwrite'/>
 756                                 <cardinality min='1' max='1'/>
 757                                 <values>
 758                                         <value name='use_global'>
 759                                                 <description>
 760                                                         <loctext xml:lang='C'>
 761 Apply Global Default block policy, specified in network/ipfilter for the service. This is the default value.
 762                                                         </loctext>
 763                                                 </description>
 764                                         </value>
 765                                         <value name='none'>
 766                                                 <description>
 767                                                         <loctext xml:lang='C'>
 768 Block by dropping packets.
 769                                                         </loctext>
 770                                                 </description>
 771                                         </value>
 772                                         <value name='return'>
 773                                                 <description>
 774                                                         <loctext xml:lang='C'>
 775 Block by returning RST or ICMP messages.
 776                                                         </loctext>
 777                                                 </description>
 778                                         </value>
 779                                 </values>
 780                                 <choices>
 781                                         <include_values type='values'/>
 782                                 </choices>
 783                         </prop_pattern>
 784                         <prop_pattern name="apply_to" type="astring"
 785                             required="false">
 786                                 <common_name>
 787                                         <loctext xml:lang='C'>
 788 Apply policy to
 789                                         </loctext>
 790                                 </common_name>
 791                                 <description>
 792                                         <loctext xml:lang="C">
 793 The source host and network IPv4 addresses, incoming network interfaces, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
 794                                         </loctext>
 795                                 </description>
 796                         </prop_pattern>
 797                         <prop_pattern name="apply_to_6" type="astring"
 798                             required="false">
 799                                 <common_name>
 800                                         <loctext xml:lang='C'>
 801 Apply policy to
 802                                         </loctext>
 803                                 </common_name>
 804                                 <description>
 805                                         <loctext xml:lang="C">
 806 The source host and network IPv6 addresses, incoming network interfaces, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
 807                                         </loctext>
 808                                 </description>
 809                         </prop_pattern>
 810                         <prop_pattern name="exceptions" type="astring"
 811                             required="false">
 812                                 <common_name>
 813                                         <loctext xml:lang='C'>
 814 Make exceptions to
 815                                         </loctext>
 816                                 </common_name>
 817                                 <description>
 818                                         <loctext xml:lang="C">
 819 The source host and network IPv4 addresses, incoming network interfaces, and ippools to exempt from the set policy. That is, those to accept if the policy is set to deny, or to deny if the policy is set to accept.
 820                                         </loctext>
 821                                 </description>
 822                         </prop_pattern>
 823                         <prop_pattern name="exceptions_6" type="astring"
 824                             required="false">
 825                                 <common_name>
 826                                         <loctext xml:lang='C'>
 827 Make exceptions to
 828                                         </loctext>
 829                                 </common_name>
 830                                 <description>
 831                                         <loctext xml:lang="C">
 832 The source host and network IPv6 addressess, incoming network interfaces, and ippools to exempt from the set policy. That is, those to accept if the policy is set to deny, or to deny if the policy is set to accept.
 833                                         </loctext>
 834                                 </description>
 835                         </prop_pattern>
 836                         <prop_pattern name="target" type="astring"
 837                             required="false">
 838                                 <common_name>
 839                                         <loctext xml:lang='C'>
 840 Apply policy to
 841                                         </loctext>
 842                                 </common_name>
 843                                 <description>
 844                                         <loctext xml:lang="C">
 845 The destination host and network IPv4 addresses, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
 846                                         </loctext>
 847                                 </description>
 848                         </prop_pattern>
 849                         <prop_pattern name="target6" type="astring"
 850                             required="false">
 851                                 <common_name>
 852                                         <loctext xml:lang='C'>
 853 Apply policy to
 854                                         </loctext>
 855                                 </common_name>
 856                                 <description>
 857                                         <loctext xml:lang="C">
 858 The destination host and network IPv6 addresses, and ippools to deny if the policy is set to deny, or accept if the policy is set to accept.
 859                                         </loctext>
 860                                 </description>
 861                         </prop_pattern>
 862                 </pg_pattern>
 863                 <pg_pattern type='notify_params' target='all' required='false'>
 864                         <common_name>
 865                                 <loctext xml:lang='C'>
 866 FMA and SMF notification parameters
 867                                 </loctext>
 868                         </common_name>
 869                         <description>
 870                                 <loctext xml:lang='C'>
 871 Parameters for notification of FMA events and SMF state transitions.
 872                                 </loctext>
 873                         </description>
 874                         <prop_pattern name='smtp,active' type='boolean'
 875                             required='false'>
 876                                 <common_name>
 877                                         <loctext xml:lang='C'>
 878 smtp notification active
 879                                         </loctext>
 880                                 </common_name>
 881                                 <description>
 882                                         <loctext xml:lang='C'>
 883 Notifcation mechanism smtp active status.
 884                                         </loctext>
 885                                 </description>
 886                         </prop_pattern>
 887                         <prop_pattern name='smtp,to' type='astring'
 888                             required='false'>
 889                                 <common_name>
 890                                         <loctext xml:lang='C'>
 891 smtp notification recipient
 892                                         </loctext>
 893                                 </common_name>
 894                                 <description>
 895                                         <loctext xml:lang='C'>
 896 Recipient for smtp notification mechanism.
 897                                         </loctext>
 898                                 </description>
 899                         </prop_pattern>
 900                         <prop_pattern name='smtp,reply-to' type='astring'
 901                             required='false'>
 902                                 <common_name>
 903                                         <loctext xml:lang='C'>
 904 smtp notification reply-to
 905                                         </loctext>
 906                                 </common_name>
 907                                 <description>
 908                                         <loctext xml:lang='C'>
 909 Header reply-to for smtp notification mechanism.
 910                                         </loctext>
 911                                 </description>
 912                         </prop_pattern>
 913                         <prop_pattern name='snmp,active' type='boolean'
 914                             required='false'>
 915                                 <common_name>
 916                                         <loctext xml:lang='C'>
 917 snmp notification active
 918                                         </loctext>
 919                                 </common_name>
 920                                 <description>
 921                                         <loctext xml:lang='C'>
 922 Notifcation mechanism snmp active status.
 923                                         </loctext>
 924                                 </description>
 925                         </prop_pattern>
 926                         <prop_pattern name='syslog,active' type='boolean'
 927                             required='false'>
 928                                 <common_name>
 929                                         <loctext xml:lang='C'>
 930 syslog notification active
 931                                         </loctext>
 932                                 </common_name>
 933                                 <description>
 934                                         <loctext xml:lang='C'>
 935 Notifcation mechanism syslog active status.
 936                                         </loctext>
 937                                 </description>
 938                         </prop_pattern>
 939                 </pg_pattern>
 940         </template>
 941 </service>
 942 
 943 </service_bundle>