Robert Milkowski wrote:
It would also require adjustment of setppriv() at 
http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/uts/common/syscall/ppriv.c#57

and perhaps somewhere else.

But right now I'm more asking about why L can't be allowed to grow (when E is a 
full set or when new L' is a subset of E set of calling process) rather then 
implementing anything.

If L could grow it wouldn't be L it would be P. The reason L can only be reduced is fundamental to how the privilege system works and what makes it safe - particularly for zones.

Please give a very specific example of what it is you are trying to do.

--
Darren J Moffat
_______________________________________________
opensolaris-code mailing list
opensolaris-code@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/opensolaris-code

Reply via email to