> And I don't like sudo. Too strange thing.
> 
> And in that case we should forget about ZFS (because
> it is administred
> in different way), dtrace (strange, it is not on AIX
> or HP-UX), FMA,
> what else? Time to forget ACLs, they are not managed
> in the same way
> around all OSes...

Sorry, but most shops wouldn't even know where to begin with ACLs, not to 
mention most shops don't even know they exist in UNIX. I happen to know about 
them and how to use them, but I'm a rare and dying breed these days.

ZFS did break the traditional UNIX interfacing with UNIX utilities, as did SMF, 
and don't you think for one nanosecond that it doesn't bother me!

FMA is hardware-specific and as such belongs to the underlying subsystems. 
Since the underlying HW is different, (PA-RISC, IA64 anyone?), that is logical.

> RBAC is Solaris way, correct and clean. Not sudo
> hack. You can use it,
> nobody will stop you. But don't stop RBAC just only
> because you don't
> understand RBAC. Write sudo wrapper around RBAC, if
> you want.

I never wrote that I don't understand it. I'm root and will be root for the 
rest of my life, with all the stuff that comes with that responsibility, period.

But would it kill you guys to just once, admit you overcomplicated it and 
overengineered it? Just once? You screwed up with the RBAC implementation, just 
come out clean and admit it, and life goes on. Nobody will kill you for it, 
people make mistakes.
 
 
This message posted from opensolaris.org
_______________________________________________
opensolaris-discuss mailing list
[email protected]

Reply via email to