John Beck wrote: > Glenn> I think that signing in again, or assuming a role should not be a > Glenn> function of this tool. It should be a function of the desktop. For > Glenn> example, in Trusted Extensions both the CDE and JDS desktops provide > Glenn> GUIs for role assumption. There is also a new JDS framework for > Glenn> running tools that require special privileges. > > Fine: no objection here; we seem to be in violent agreement.
The "JDS framework" is gksu. gksu on OpenSolaris systems will do basically this: 1. If the user has a profile to run the command with privilege use pfexec 2. If the user has a role that has a profile assume the role and pfexec 3. If neither of those work ask for the root password and su to run the command. There is a possibility that this could change to: 3. If sudo is configured use that 4. Use su with the root password. I don't think the sudo support is being built in the first builds to include gksu - because we don't ship Solaris with sudo at this time. -- Darren J Moffat
