Kais Belgaied writes:
> On 04/09/09 07:02, Sebastien Roy wrote:
> > Folks,
> >
> > Why does the DLDIOC_MACADDRGET ioctl require the sys_dl_config
> > privilege?  Is this a bug?
> >   
> 
> ifconfig as documented, when run by a noon privileged user, it is 
> expected to not show the ether address.

Isn't that sort of broken behavior?

The MAC addresses certainly aren't "secrets" of any sort.  We don't
try to hide "netstat -np".

The reason it was like this was historical: getting the MAC address in
ifconfig meant opening up the DLPI node and talking to the driver.  As
the drivers didn't have discrete privileges for each operation, and
you had to be almighty root to touch them, 'ifconfig' didn't show the
MAC address when not privileged.

In other words, I think we're building grass landing strips and hoping
the cargo planes will return.

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677

Reply via email to