On Tue, Sep 15, 2009 at 02:45:19PM -0700, John Sonnenschein wrote:
> Thoughts?
>
> http://cr.opensolaris.org/~error404/1147/

The bug for 1147 mentions read-only filesystems, but I don't see any
code addressing that particular case.  How are you planning on handling
the ROFS scenario?

The geteuid(2) checks don't deal with privileges(5).  If you have time,
it might be worth adding privilege aware code to portable.  Unless the
security guys are writing a python wrapper for least privilege, it may
require you to also write C code, making it a bit more of an
undertaking.  My guess is that the geteuid check is probably sufficient
for now, especially given that this is just the test suite.

-j

_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to