So Boomer is interested in this for a couple of reasons:
1) map a /dev/audio (or /dev/dsp) node to a Sun Ray session -- necessary
for OSS API where applications don't respect an environment file. This
is the single biggest pressure for this feature right now.
2) for security domains where a zone based configuration can specify a
real device and possible limitations or other settings to use for the
device.
3) possibly (but not necessarily) virtualized audio to deal with weird
hotplug scenarios, although in that case I don't think I *need* this. I
might be able to use it though.
- Garrett
Nicolas Williams wrote:
> A weekends-only project of mine recently has been to add support to
> Solaris for something akin to AFS PAGs and Linux keyrings.
>
> Such a facility would have a number of uses, including some related to
> security and some not:
>
> - Decoupling of ccache and user ID in Solaris Kerberos (security).
>
> - /dev/audio and other device virtualization (not security).
>
> The Boomer i-team is sufficiently interested in this idea that they
> want to sponsor an ARC case for this sooner rather than later.
>
> Related to this:
>
> - Login "seat" virtualization in general by decoupling the location
> of "seat" devices and X11 displays from environment variables
> (like DISPLAY).
>
> This has potential impact on SunRay. Therefore I'm cc'ing Michael
> Bender.
>
> Other potential future uses of this are mentioned in the docs you'll see
> at the following webrev:
>
> http://cr.opensolaris.org/~nico/solaris-PAGs/
>
> Please take a look. Consider this a partial design and pre-ARC review.
>
> I'll probably need help getting this wad from being a prototype to being
> ready for integration, as this is not really my dayjob nowadays.
> Volunteers are welcome!
>
> Thanks,
>
> Nico
>
