Implementation Guide › Installing and Customizing a UNIX Endpoint › Solaris 10 Zones Implementation › Start CA Access Control in A Non-global Zone

Previous Topic: Starting and Stopping CA Access Control in a Zone

Next Topic: zlogin Utility Protection

Start CA Access Control in A Non-global Zone

You can start CA Access Control from any non-global zone just as you would normally, but you must first load the CA Access Control kernel module in the global zone.

To start CA Access Control in a non-global zone

  1. In the global zone, enter the SEOS_load command to load the CA Access Control kernel module.

    The CA Access Control kernel loads and you can now start CA Access Control in any zone.

    Note: The CA Access Control kernel loads but CA Access Control does not intercept events in the global zone.

  2. In the non-global zone, enter the seload command to start CA Access Control in that zone.

    The non-global zone is protected by CA Access Control.

    Note: You can also start CA Access Control in the non-global zone remotely. For more information, see the seload command in the Reference Guide.