Setting up IO fencing on Solaris

To enable IO fencing on Solaris, the UNIX user starting the Cluster Edition must be granted SYS_DEVICES inheritable privileges to enable access to the raw devices (/dev/raw/raw# or /dev/rdsk/c#t#d#s#) used by the Cluster Edition for database and quorum devices. SYS_DEVICES allows the Cluster Edition to execute the SCSI-3 PGR commands used for IO fencing.

Permanent SYS_DEVICES privileges can be granted to the user’s set of inheritable privileges. For example:

sudo ppriv -s I+sys_devices $$

Temporary SYS_DEVICES privileges can be granted to the current user’s shell process. For example:

usermod -K defaultpriv=basic, sys_devices mylogin

See your operating system documentation for complete syntax and usage information.