Tom Haynes wrote:
What about the case where the customer wants to administer the zone they
purchased
and they do not want the global zone admins to have local access to
their data?
That would violate basics of the zones model. The global zone admin has
complete access to all devices attach
Tom Haynes wrote:
What about the case where the customer wants to administer the zone they
purchased
and they do not want the global zone admins to have local access to
their data?
Well, there is a tradition in Zones of making the global zone
substantially more equal than others. Remember th
On Wed, Feb 14, 2007 at 02:03:09PM -0600, Tom Haynes wrote:
> What about the case where the customer wants to administer the zone they
> purchased
> and they do not want the global zone admins to have local access to
> their data?
The global zone admin (all privileged user) can do _anything_ (e.
Nicolas Williams wrote:
I'd even go further and say that any user
in the global zone would not have access to /export/z1. [...]
But if we resolve loopback NFS mount issues then any zone could access
any other zone's NFS shares provided they have logical or phy
And here is a link to the bug which is tracking NFS in zones:
http://bugs.opensolaris.org/view_bug.do?bug_id=4964859
Note that the description sucks right now as far as OpenSolaris is
concerned. I'll
get the relevant comments back into the description.
BTW: I crossposted to all of the discuss