Dan Price wrote: > I've prototyped an enhancement: the method script which launches the > depot will now relinquish a substantial number of unneeded privileges. > This is context-aware, dropping more privileges for depots running > read-only. > > http://cr.opensolaris.org/~dp/pkg-priv/ > > I'd like feedback on this idea. I've implemented it, it seems to work. > Whether it's the right approach for the long term or whether it fits > the "correct SMF way to do things"-- since we could specify privs via > method contexts-- I'm not sure. I do think it will bolster our security > in the short term. > > Stephen, Shawn & Brock I would like you to take a look.
It seems right; though my experience with ppriv is next to nil. The only comment I have is whether we could work this into the test suite eventually, somehow. Could you open a bug for that? Thanks for being security-minded. Cheers, -- Shawn Walker _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
