resource control in zones

I 'm getting following error while setting deny action for a zone.cpu-shares resource control

prctl: unable to enable deny on rctl with global flag 'no-deny' and when i check with rctladm its shows me

bash-3.00# rctladm zone.cpu-shares
zone.cpu-shares syslog=n/a [ no-basic no-deny no-signal no-syslog count ]
bash-3.00#

no how do i change this no-deny to deny ?