Peter Memishian wrote:
> I could see doing this on a subset of well-controlled applications, but
> what happens when a customer using this facility wants some Sun-supported
> application that happens to use loopback inet IPC to "work"? Are we going
> to change the code to accommodate their need, or tell them they're off the
> reservation?
How would this be any different than if they tried removing other basic
privileges, like the ability to fork() or exec(), from apps that really
needed it? If customers break their system, it's broken.
--
-Alan Coopersmith- alan.coopersmith at sun.com
Sun Microsystems, Inc. - X Window System Engineering
