Jeffrey Hutzelman said:

> Yes.  OpenAFS is not aware of zones at all, so the PAG namespace ends up
> being global rather than per-zone.  So not only can root from one zone
> steal a PAG from another, but PAG-less users in different zones but with
> the same uid will share tokens.

If I'm understanding you correctly, that would be a great big

        "WARNING! DO NOT RUN OPENAFS ON A MULTI-ZONE SYSTEM (for now)"

kind of thing?
-- 
 Matthew Weigel
 hacker
 [EMAIL PROTECTED]
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to