Darren J Moffat wrote: [snip] > On the other hand given that you already have to modify the code to have > pfexec used it doesn't seem unreasonable to make it work as the user > expects. I'd be happy to work with you offline to investigate how much > code change it would be to have the appropriate subset of builtins > disabled when running as pfksh93. I'd be happy to contribute the code > changes.
Yes, but disabling the builtins is not that easy. My main concern is that such a change must not - in any case - cause the test suite to fail, which quickly leads to the question/problem which builtins should be disabled and which not (for example the "test" builtin cannot be disabled unless we make the /usr/bin/test utility aware of the additional datatypes supported by ksh93 (e.g. floating-point, arrays, binary context etc.)) ? How do we judge this ? IMO we need a more generic solution (I've listed two options in http://mail.opensolaris.org/pipermail/ksh93-integration-discuss/2006-September/001198.html) and some more investigation about the possible side-effects. > So in ARC terminology, if this was a full case rather than a fast track > I would be suggesting a TCA (Technical Change Advised) that the builtins > be disabled when running as pfksh93. I'd also be suggesting opinion > Advice that this project team work with the RBAC project team (ie > Casper) to ensure that they don't clash and only one solution is needed. Ahhggrll... ;-( I really like to avoid a "TCR" here and work in peace on a solution. This seems to be more complex and rushing any solution without propper investigation may lead to something which may even be worse than the current status (which is at least predictable and controlable for the developers of scripts). Another issue is that I don't know much about RBAC (and AFAIK neither David&Glenn do)... I first have to learn how it works in detail and which side-effects it has... ---- Bye, Roland -- __ . . __ (o.\ \/ /.o) roland.mainz at nrubsig.org \__\/\/__/ MPEG specialist, C&&JAVA&&Sun&&Unix programmer /O /==\ O\ TEL +49 641 7950090 (;O/ \/ \O;)
