Shawn Walker wrote:
Martin Englund wrote:
Hi Bart!

On 5 okt 2009, at 20:46, Bart Smaalders wrote:

Martin Englund wrote:
Hi!
I'm building a package where I need to add a role, but I can't find anything documented about it. Is it implemented? And if not, is there an RFE filed which I can attach myself to?
cheers,
/Martin

Deliver the same contents of the file fragment as you would w/
svr4 packaging, but deliver it as follows:

/etc/security/auth_addr:    etc/security/auth_addr.d/$(PKGNAME)
/etc/security/exec_attr     etc/security/exec_attr.d/$(PKGNAME)
/etc/security/prof_attr     etc/security/prof_attr.d/$(PKGNAME)
/etc/user_attr            etc/user_attr.d/$(PKGNAME)

and set the the following attribute on the fragment:

restart_fmri=svc:/system/rbac

so that the rbac service will update the config files when the package
is added to a running image.  The rbac service runs at boot and updates
the system config files w/ any new files it finds...

Thanks! That helps a lot.

I think it would be nice if one could just define a role by just using:
add role ... (instead of add user)

I believe it was intentional that role management logic was moved to the OS and out of the packaging system.

Cheers,

In general, the only thing for which we add native support in the packaging system are those things necessary to install or boot.
As a result, we can add users and drivers in the packaging system,
but roles, etc, can be managed w/o such knowledge being "baked in".

- Bart


--
Bart Smaalders                  Solaris Kernel Performance
[email protected]         http://blogs.sun.com/barts
"You will contribute more with mercurial than with thunderbird."
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to