>  ... on the other hand the fact that setuid-ignoring is a per-cell
>  and not also a per-volume (or at least, per-fileserver) flag still
>  bites.

As long as a complete cell is running with ONE server key, an
administrator for part of the cell is an administrator for all of the
cell. As only administrators can create a setuid root file, whatis the
point in having a per-volume or per-server flag?


--
Michael Niksch                     TEL:               +41-1-7248-913
IBM Zurich Research Laboratory     FAX:               +41-1-7103608
Saeumerstrasse 4                   BITNET/VNET:       NIK at ZURICH
CH-8803 Rueschlikon / Switzerland  INTERNET/IBMIPNET: [EMAIL PROTECTED]

Reply via email to