On Thu, Oct 02, 2008 at 12:49:40PM +0200, Michael Schmarck wrote:
> Hi.
>
> 2008/10/2 Ceri Davies <ceri at submonkey.net>:
> > On Thu, Oct 02, 2008 at 08:31:41AM +0200, Michael Schmarck wrote:
> >> Hi.
> >>
> >> 2008/10/1 David Bustos <David.Bustos at sun.com>
> >> >
> >> > Quoth Michael Schmarck on Wed, Oct 01, 2008 at 02:20:21PM +0200:
> >> > > As I'm not root, I of course cannot write to /dev/msglog.
> >> > >
> >> > > What's the proper remedy to this problem on Solaris 10?
> >> > > Chmod 0666 /dev/../devices/pseudo/sysmsg at 0:msglog?
> >> >
> >> > That would probably work, but then anybody could write to msglog. You
> >>
> >> Of course. And for that reason, chmod 0666 isn't a real
> >> solution. :)
> >
> > You could give that user the file_dac_write privilege, and then drop it
> > with ppriv after the write to msglog.
>
> Hm.
>
> beta at sys06 ~ $ ppriv -l | grep file_dac_write
> file_dac_write
>
> Ie. the user "beta" on system "sys06" already has
> this priv.
Hmm, that doesn't follow. "ppriv -l" just lists all privileges that
exist, not necessarily those that the current process has.
Ceri
--
That must be wonderful! I don't understand it at all.
-- Moliere
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL:
<http://mail.opensolaris.org/pipermail/smf-discuss/attachments/20081002/003c8816/attachment.bin>
