A developer wants to use DTrace in a zone to examine the kernel. What are his options?
A.
Modify the zone so thathe can use DTrace to examine kennel datastructures.
B.
All that’s required istoassume the “root” role.
C.
By using dtrace_procand dtrace_user privileges he can examine his own code, but not the
kernel.
D.
By addingipc_dac_read and ipc_dac_write privileges to the zone.
E.
Changethe zone’s file-mac-profile fromstrict tonone to enable the use of DTrace within thezone.
Explanation:
How to Use DTracein a Non-global Zone
global# zonecfg -z my-zone
zonecfg:my-zone> set limitpriv=”default,dtrace_proc,dtrace_user”
zonecfg:my-zone> exit
Note –
Depending on your requirements, you can add either privilege, or both privileges.
Log in to the zone.
global# zlogin my-zone
my-zone# dtrace -l
Note:
*Oracle Solaris DTrace is a comprehensive, advanced tracing tool for troubleshooting systemic
problems in real time.
*DTrace helps you understand a software system by enabling you to dynamically modify the
operating system kernel and user processes to record additional data that you specify at locations
of interest, called probes.
Reference:System Administration Guide: Oracle Solaris Containers-Resource Management and
Oracle Solaris Zones,Using DTrace in a Non-Global Zone
C
http://docs.oracle.com/cd/E18752_01/html/817-1592/gelyb.html