Solaris 11 features

1. ZFS on disk encryption:  zfs create -o encryption=on [ With pam_zfs_key PAM module for per-user key management]
2. Immutable Zones: zonecfg -z myzone set file-mac-profile=fixed-configuration
3. New package system - with cryptographically signed packages [ pkg(5) ] and multiple signature support
4. Root as a role by default & authentication with user password with authentication cacheing [pam_tty_tickets ]
5. Network virtualisation dladm(1M) & bandwidth control flowadm(1M)
6. Automatic VNICs for Zones - one line zone creation: zonecfg -z myzone 'create ; set zonepath=/zones/myzone'
7. IPfilter SMF integration - per service firewall rules
8. New basic privileges: file_read/file_write/net_access
9. Default root shell is bash (I'd personally prefer zsh but bash is good enough)
10. 'man -k' works by default
11. sudo with Solaris Audit support and priv_exec removal for NOEXEC