A developer wants to use DTrace in a zone to examine the kernel. What are his options?
A.
By adding ipc_dac_read and ipc_dac_write privileges to the zone.
B.
By using dtrace_proc and dtrace_user privileges he can examine his own code, but not
the kernel.
C.
Modify the zone so that he can use DTrace to examine kennel data structures.
D.
All that’s required is to assume the “root” role.