I am calling scf_pg_delete() to delete a property group (and thus all of 
its properties).

My property group is of type SCF_GROUP_APPLICATION, and has the
value authorization: solaris.smf.vscan.value specified.

I assumed that I would need the same authorization to delete a property 
group
using scf_pg_delete() as I needed to add one using scf_instance_add_pg(),
namely solaris.smf.modify.application. However that is not what I am 
experiencing.

When I call scf_pg_delete() as a user with no smf authorization, it does 
not fail.
Looking at the properties(using svccfg listprop) I see that the property 
group still
exists but all of its properties have been removed.

When I call scf_pg_delete() as a user with solaris.smf.modify.application
authorization, the entire property group is deleted.

Is this expected behavior, am I doing something wrong, or is there 
perhaps an
issue here? (I am currently working round this by checking the user's 
auths before
calling scf_pg_delete()).

Thanks
Joyce


Reply via email to