On Dec 6, 2007 4:41 AM, Darren J Moffat <[EMAIL PROTECTED]> wrote:
> You REALLY REALLY REALLY REALLY don't want to test that the user has a
> specifically named profile - not even pfexec (pfsh,etc) do that.  It is
> very likely that the user may have a differently named profile with the
> required privileges/uid assigned to the command.

One of the Sun tools I saw (whose name eludes me at the moment)
explicitly checked for the "Software Installation Profile" -- since
I'm the ignorant person that suggested this to John, can you clarify
how you can check for sufficient privileges?

In other words, if you want to ensure that a user has the privileges
equivalent to a "Software Installation Profile" how do you go about
doing that?

I assume somehow using libsecdb as you hint at below?

> Also if you want to parse the user_attr(4) file the correct way to do
> this is using the routines in libsecdb because this file may be in the
> nameservice rather than just locally.

Cheers,
-- 
Shawn Walker, Software and Systems Analyst
http://binarycrusader.blogspot.com/

"To err is human -- and to blame it on a computer is even more so." -
Robert Orben
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to