On 03/17/11 13:24, Glenn Faden wrote:
I'm not sure if System Administrator is the right profile, but
it looks good right now. It's likely that the root role
may also have to be used to get the system users/roles fully
configured in some cases.
It isn't required to assign this profile to the new user since the user will
already have the root role and sudo privileges. Another possibility would be to
assign the profile Desktop Administration which will have a subset of the
commands in System Administrator. The Desktop Administration profile just
enumerates GUI-based admin tools that have GNOME launchers defined for them.
Note that GNOME will be changing in the next build to automatically invoke
pfexec for any GUI command that is listed in a profile assigned to the logged
in. And for any commands not in any profiles assigned to the user, it will
invoke gksu (graphical su) if the corresponding profile is assigned to one of
the user's roles.
Glenn, IIRC, you and I both had suggested the Software
Installation Rights Profile to avoid the need to use the root
role. I know with Brian's case PSARC/2011/087 GNOME Panel
Integration with RBAC that some additional recommendations had
been made. I didn't recall how that all fit together,
System Administrator seemed to sufficiently cover things
that I made the comment I did.
Gary..
_______________________________________________
caiman-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/caiman-discuss
