sched is the first process running. It is referred to as the swapper. This
process is responsible for operating system scheduling, and swapping out light
weight processes when necessary to run higher priority processes. From this
process, the scheduling of and swapping of processes on the system is
controlled.
init is the process that is responsible for the
execution of all processes at their respective run levels. At bootstrap time,
init is the first process started. From its execution, init starts all other
processes, and brings the machine to its default run level (for Solaris, this
is run level 3).
pageout is the next process in the sequence. It is used to control the
paging out of memory to disk, and back in again.
fsflush is a daemon responsible for writing data back to the disks. The
kernel checks superblocks on a 30 second interval, and the data in the
superblock is either idle or unchanged, the kernel uses fsflush to clear the
superblock and send the information back to the disks.
sac is the Service Access Controller,
and is started when the system enters multiuser mode. sac is a program
designed to watch ports on a Solaris system. It can provide statics on port
use, poll for failure, restart port monitors that fail, and a variety of other
functions.
fbconsole is used to redirect /dev/console output to a console window in X.
rpcbind is the rpc program port mapper. This program runs on port 111, and
contains a directory of all rpc services running on a system. We'll not get
too deep into this in this section yet, but sufficed it to say that if you're
making use of programs that use rpc, this daemon is mandatory. If you know
little or nothing about remote procedure call and what it's used for, one is
probably better off without it and rpc altogether.
devfseventd and devfsadmd we'll cover together, as they're dependent upon
one another. These two daemons are part of the Solaris 8 device management
package. devfseventd is the kernel event notification daemon. This daemon
runs on the system, monitoring the kernel for things such as when device
nodes are added and removed from the kernel device tree. devfsadmd is the
replacement to the antiquated programs such as disks, tapes, and devlinks (all
part of the old devfs tools). devfsadmd builds the links in the /dev and
/devices directories. All the old devfs tools are now symbolic
links to devfsadm.
in.routed is the routing daemon. This daemon listens to UDP on port 520 for
dynamic updates to the routing table. This daemon makes use of Routing
Information Protocol (RIP). The q flag puts this daemon into a passive state,
where it listens only for routing updates. Details for RIP can be found in
RFC 1723.
lockd is the file locking manager for nfs. This daemon controls all the file
locking procedures necessary for alteration of files mounted remotely via nfs.
This daemon is necessary for both client and server running nfs. The daemon
handles incoming locking requests from other locking daemons for files it's
serving. It additionally communicates with other locking daemons to for
locking on remotely mounted file systems.
in.idpd is a daemon new in Solaris 8. This daemon provides auto configuration
for hosts and routers under IPv6. IPv6 compatibility is new with this release
of Solaris.
nscd is the name service cache daemon. This daemon caches the most common
name service requests for a system to enhance operation. The daemon caches
common things such as password file entries, group file entries, host file
entries, and miscellaneous attributes. This is not to be confused with the
Domain Name System. The primary function of this service revolves around NIS
and NIS+. The operation of this daemon is dictated by /etc/nscd.conf
lpsched is a printer service utility. It is part of the UNIX lp package, and
starts or restarts print services on a printer.
inetd is the services superserver. It provides a wrapper-like service for
numerous user services on a Solaris system, starting services only when
they're called, and killing them when they're not needed. For more
information on inetd, see the first two editions of "Back to the Basics," part I and
part II.
syslogd is the system logging daemon. This daemon is responsible for
monitoring and logging system events, or sending them to users on the system.
syslogd is a critical application on every system, and is configurable with
the /etc/syslog.conf file.
automountd is the autofs mount daemon. This service makes use of RPC to mount
and unmount remote file systems.
statd is the status monitoring daemon, and it works in conjunction with lockd.
This daemon communicates with clients to tell them when the server has
rebooted. The daemon operating on clients also communicates with the statd
process on the server to tell the server when a client has rebooted. The
principle purpose for the daemon is tracking client sessions, and recovery
post-crash or after a reboot.
vold is the volume manager. This neat little daemon manages the system cdrom
and floppy. When media is inserted into either the cdrom or the floppy drive,
vold goes to work and mounts the media automatically. Configuration
information for this utility is in /etc/vold.conf.
cron is a system scheduling utility. Cron is capable of executing events for
specific users on a predetermined time schedule if entries are made into the
users crontab.
powerd is the system power daemon. This daemon performs suspend operations,
saving system state and writing it to disk. Upon reboot of the system, the system
picks up from state powerd saved, and begins a resume operation.
cimomboot is part of the Solaris Web Based Enterprise Management (WBEM). To
give a little background, CIM is the Common Information Model, an Object
Oriented model built to describe managed resources such as disks and CPUs.
cimomboot is the daemon process for starting a WBEM session. When a WBEM
client requests a connection, cimomboot starts the CIM Object Manager. For
more in depth information about this service, see the Solaris WBEM Services
Administrator Guide at http://docs.sun.com. We'll only touch lightly upon it
in this document.
utmpd is the utmp and utmpx monitoring daemon. utmp has been obsoleted by
utmpx, but for reverse compatibility, it exists. To cut to
the chase, utmpx is used to record the current users on a system. When a
user terminates a process or logs out of a system, utmpd polls these files to
ensure the entries for these events has been removed. Should the entries
still exist in the files, utmpd removes them.
Xsun is the X11 server for Solaris. This process is started by xinit through
openwin. This process provides the graphical framework for the Window Manager
to run on top of.
dtgreet is the graphical login the Common Desktop Environment (CDE) provides.
snmpdx is part of the Solstice package. Officially defined, snmpdx is the
Solstice Enterprise Master Agent. This daemon listens on udp port 161, and
also listens on a secondary port for snmp traps to forward.
ttymon is a port monitor for terminal ports. This process is usually used in
conjunction with sac. This facility controls TTY settings to users and
services.
mibiisa is the Sun RFC compliant Simple Network Management Protocol (SNMP)
daemon. This daemon is fully RFC compliant,
and supports additional directives, which can be found in RFC 1213.
snmpXdmid is another part of the Solstice suite. This package is the DMI
mapper subagent. The process is part of the Desktop Management Interface, and
communicates from itself to snmpdx.
dtlogin is another member of the CDE suite of tools distributed with Solaris.
This program launches dtgreet when it starts. dtlogin also provides the
vector for authentication of user credentials when logging into the system.
dmispd is the DMI Service Provider. This process is the core of DMI. dmispd
provides all the services locally for applications to use DMI, and can additionally serve
and receive DMI requests remotely.
sendmail is the Mail Transport Agent used on Solaris 8.
rpc.ttdbserverd is part of the ToolTalk Suite. This daemon serves its database
(TT_DB) to remote clients using a Desktop Environment (normally CDE) for remote
point and click usage of local resources. This service uses RPC.
rquotad. This is an RPC based service that functions as part of NFS.
This service enforces quotas for local file systems remotely. If a local file system is
shared and remotely mounted, this daemon sends data to the remote machine in format readable
by quota for the sake of quota information for users.
- Conclusion
So far, we've built the system, installed the Full Distribution of Solaris 8 plus
OEM support, gathered information about the processes running, and discussed them.
In our next article, we'll look at how these processes are started, the significance
of the startup scripts and how to customize the system to conform to our security needs.
