> John Plocher wrote:
> > When to use setuid -vs- roles and profiles
> > http://www.opensolaris.org/os/community/arc/bestpractices/rbac-intro/
> >
> > HOWTO guide for adding RBAC authorizations
> > http://www.opensolaris.org/os/community/arc/bestpractices/rbac-auths/
> >
> > HOWTO guide for adding RBAC Rights Profiles
> >
> > http://www.opensolaris.org/os/community/arc/bestpractices/rbac-profiles/
>
> I found these three documents to be essentially opaque. They all seem
> to presume that the reader already knows most of what is to be known
> about RBAC and rights profiles, and only wants a bit of guidance on when
Indeed. That's what the reference sections are about.
http://developers.sun.com/solaris/articles/ais.html
> to do what. At least, there should be references to the appropriate
> background material. Better, IMHO, would be a broader description of
> the context of where the advice given applies.
They were written with a particular audiance in mind. That is
one who knew what was needed, but not quite sure on how to
go about doing things. Perhaps your saying that ais.html
is an incomplete tutorial. I know there are other tutorials.
They linked off of http://sac.eng/cgi-bin/bp.cgi?NAME=RBAC.bp
I no longer have nor recall if there were external references to
them.
The first rbac-intro on choosing between using suid/forced
privileges and just a Rights Profile. The other two are
how to's for delivering authorizations and rights profiles.
Gary..
_______________________________________________
opensolaris-discuss mailing list
[email protected]
