smbd makes it's own privilege set at start:

smbd_daemonize_fini(int fd, int exit_status)
...
        priv_basicset(pset);

        /* list of privileges for smbd */
        (void) priv_addset(pset, PRIV_NET_MAC_AWARE);
        (void) priv_addset(pset, PRIV_NET_PRIVADDR);
        (void) priv_addset(pset, PRIV_PROC_AUDIT);
        (void) priv_addset(pset, PRIV_SYS_DEVICES);
        (void) priv_addset(pset, PRIV_SYS_SMB);
        (void) priv_addset(pset, PRIV_SYS_MOUNT);

        priv_inverse(pset);

        /* turn off unneeded privileges */
        (void) setppriv(PRIV_OFF, PRIV_EFFECTIVE, pset);
...

So, SMF context will not work. For now I've set "ppriv && SIGHUP" in a separate 
service, which is launched just after smbd.

--
Dmitry Glushenok
Jet Infosystems

> 3 нояб. 2016 г., в 15:58, Jim Klimov <[email protected]> написал(а):
> 
> If that is the case, consider fixing up the method_context privileges in the 
> SMF service for the smb/server.
> Good luck and thanks for sharing ;)

_______________________________________________
OmniOS-discuss mailing list
[email protected]
http://lists.omniti.com/mailman/listinfo/omnios-discuss

Reply via email to