Hi,

The project team is working on a new admin tool for administering
wireless USB hosts and device-host associations, and also a service for
store/read wusb association infomation. A couple of new authorizations
and a new profile will be introduced for the RBAC model for the wusb
tool and service. I am finding an existing role in solaris to grant the
newly introduced WUSB Management profile to it. The profile includes all
the authorizations that needed for managing the WUSB service and running
the admin tool. If look into /etc/user_attr file, seems "adm" is the
proper one if according to the its name.

Another option is to create a new role, say "wusb". Users who assumed
the wusb role are allowed to execute the WUSB admin tool and manage the
wusb service. However, it is not necessary to create a new role if there
is an existing role which is for general system admin (such as device
config, service management, etc.)

Any comments are welcomed, thanks.

For the functions of the admin tool, please see the manpage at:
http://www.opensolaris.org/os/project/wusb/wusbadm.txt

For "what's wireless USB", please see the project page at:
http://www.opensolaris.org/os/project/wusb

For WUSB design draft doc (including RBAC model), please see:
http://www.opensolaris.org/os/project/wusb/wusb_design.pdf

Thanks,
Colin



Reply via email to