What is the difference between running Solaris Containers with or without Solaris Trusted Extensions enabled?
Solaris Containers provide virtualized environments to host multiple applications and is great for performing server consolidation. The Solaris Trusted Extensions feature utilizes Solaris Containers extensively to provide security boundaries and to enforce Mandatory Access Control by labeling a Container. Solaris Containers behave slightly differently when running with Trusted Extensions enabled, providing a single system view of services such as authentication databases, security configuration, file system and network interfaces. Communication between Solaris Containers is generally dissallowed by default when Trusted Extensions is enabled, and permitted only by explicit specification. In summary, customers running with Trusted Extensions enabled use labeled Solaris Containers to provide a security boundary for their file systems, data, applications and users.
