Tom Haynes wrote:
The proposal is to move the sharetab info out of //etc/dfs/sharetab/ and into
memory. Users can still get
to the data via a filesystem interface - think of the mnttab.
Are you asking to start a project to cover this ?
If so I think that is over kill and this can easily be covered
by either the NFS or ZFS communities as a simple RFE.
Since ZFS does not use RBAC (it has its own security/authorization mechanism
based on ACLs), this means that we will have to use a setuid program to change
the file. setuid programs are not allowed in ON.
That is not rue. setuid programs are allowed in ON given sufficient
justification as to why that is the correct solution and that that code
has been sufficiently reviewed and is deemed safe.
I certainly support the proposal but I don't think a project to
implement this one thing is actually necessary.
--
Darren J Moffat
_______________________________________________
opensolaris-discuss mailing list
[email protected]
