Darren J Moffat <Darren.Moffat at Sun.COM> wrote:
> So in ARC teminology that means you are droping pfksh93 from the
> specification of this case, and are telling the ARC that you are taking
> this offline with the OpenSolaris security community (I do hope you will
> talk to us rather than trying to do this on your own).
>From a talk I had with Casper in spring when the root-less cdrtools integration
has been done, it may be that pfexec or it's task may (at least for the trusted
extensions) be moved into the kernel.
In this case, things may be even more complex in case that a shell offers
builtins for privileges(5) related commands.
J?rg
--
EMail:joerg at schily.isdn.cs.tu-berlin.de (home) J?rg Schilling D-13353 Berlin
js at cs.tu-berlin.de (uni)
schilling at fokus.fraunhofer.de (work) Blog:
http://schily.blogspot.com/
URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily
