> 
>         When mounting into the global zone proper, the mount will fail
>         if the dataset has any label other than the default ("none") or
>         admin_high/admin_low.  No automatic property setting is
>         performed for any mounts into the global zone.

It sounds like there are 3 different values for this property that have 
exactly the same effect. Is there any difference in semantics among these?

- slabel=none (or attribute not present)
- slabel=admin_low
- slabel=admin_high

If there is no difference, I suggest that there is no reason to store 
the latter two. The zfs set command could accept those values and 
convert them to none, if desired.

        Scott


-- 
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)

Reply via email to