I've set certain services to have properties

general/action_authorization = astring com.blah
general/modify_authorization = astring com.blah
general/value_authorization = astring com.blah

so that a non-root user can administer these services. It works fine, the user 
can run svccfg and edit whatever values necessary for those services, and only 
those services. However, if the same user tries to run a command such as 

svccfg -s service_fmri setprop general/environment = astring: "info"

then permission is denied. Is it possible to allow a user to run such commands 
from the command line and/or through scripts, without giving them permission to 
edit all services in the repository?

Thanks,

Jesse
 
 
This message posted from opensolaris.org

Reply via email to