On Fri, May 16, 2008 at 04:08:09PM -0700, Jordan Brown wrote: > Nicolas Williams wrote: > >That, BTW, is a very good question: will IPS warn/prompt about > >pkgs that wish to install SMF services whose method_contexts involve > >running the service with privilege? This, after all, is akin to the > >SVR4 packaging prompt about running pkg scripts as root. > > That particular prompt always struck me as pointless.
It's going to be a *lot* less pointless now! That's because there's going to be multiple pkg authorities, and repositories, ... Yes, pkg signatures and certificates can be used to decide whether any one pkg can do this w/o the prompt (this pkg came from Sun? ask no questions; did it come from Joe's Software Bazaar? ask questions; did it come from a 3rd party explicitly trusted by the customer/user? ask no questions). > If a package can deliver /etc/rcS.d/S00bomb, it can do anything. Right, I made the same point. Shawn, you cannot stop pkgs from doing whatever they feel like if you'll let them arrange to have code executed with privileges (and that you pretty much must, at least for core pkgs). > Replace with any of a gazillion other "drop a file here to get something > to run as root" locations. > > If you're letting a package install into places that require root to > write, you just have to trust it. Yup. _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
