Robert Milkowski wrote: > Hi, > > Sometimes it would be really helpful if one could raise L privilege set of > a process, especially when dealing with zones. Currently it is not permitted. > I understand the reason why however if it was permitted to do so only from a > global zone and by process with ALL privileges in its E set then it should be > allowed. > What do you think?
What problem are you trying to solve ? BTW this is probably better discussed in security-discuss@ since it is but the architecture more than the actual code itself. I've cc'd and set reply-to accordingly. -- Darren J Moffat
