My Oracle Support Banner

After upgrading from Solaris 11.3 to Solaris 11.4, the Firewall service goes into maintenance. (Doc ID 2759328.1)

Last updated on MARCH 10, 2021

Applies to:

Solaris Operating System - Version 11.4 to 11.4 [Release 11.0]
Information in this document applies to any platform.

Symptoms

 Service svc:/network/firewall/pflog:default is going into maintenance with the following error :

       Checking if capture link exists..
       /usr/sbin/dladm: link pflog0 is not valid: permission denied
       Creating a temporary capture link..
       dladm create-cap -t pflog0
       dladm: cap creation failed: permission denied
       [ 2020 Dec 21 14:46:22 Method "start" exited with status 95. ]

Changes

The problem occurs after updating from Solaris 11.3 to Solaris 11.4.

    Check the umask setting. If it shows something other than '022' this is causing the problem.

         # svccfg -s svc:/system/environment:init listprop umask/umask
         umask/umask astring 022

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.