On 08/ 4/10 01:07 PM, Jerry Jelinek wrote:
This case was approved at todays PSARC meeting.
I've marked it closed approved.
I gave the case a +1 during the meeting, and am doing so here as well.
-Seb
___
opensolaris-arc mailing list
This case is due to timeout today but it has not
received any +1s. I know there was some questions
last week, but it looks like Steve responded to all of
those. If there is no +1 today, I'll leave the case open
until it gets one.
Thanks,
Jerry
___
Hi,
Where can we find the zonestat package ?
Regards
--
This message posted from opensolaris.org
___
opensolaris-arc mailing list
opensolaris-arc@opensolaris.org
DJM-1 zonestatd
What is the SMF method script used to start zonestatd ? ie what uid/gid
and privileges does it run with ? What is the RBAC authorisation used
for managing the SMF service state and the config value changes ?
DJM-2 what method is used to ensure that zonestatd doesn't return
It runs as uid/gid 0. I'll work out which privileges are needed so I can
drop the rest.
daemon/daemon with privileges would be better. If zonestatd is the
method started by SMF you may also be able to remove the basic
proc_exec privilege if zonestatd as well.
I just reviewed the
Hey Darren,
Thanks for reviewing this. Responses in-line below.
Darren J Moffat wrote:
DJM-1 zonestatd
What is the SMF method script used to start zonestatd ? ie what
uid/gid and privileges does it run with ?
/lib/svc/method/svc-zstat
I'll add that to the interface table.
It runs as
On 27/07/2010 17:47, Steve Lawrence wrote:
It runs as uid/gid 0. I'll work out which privileges are needed so I can
drop the rest.
daemon/daemon with privileges would be better. If zonestatd is the
method started by SMF you may also be able to remove the basic
proc_exec privilege if zonestatd
Darren J Moffat wrote:
On 27/07/2010 17:47, Steve Lawrence wrote:
It runs as uid/gid 0. I'll work out which privileges are needed so
I can
drop the rest.
daemon/daemon with privileges would be better. If zonestatd is the
method started by SMF you may also be able to remove the basic
