It seems (from smf_security(5) ) that 'value_authorization' should be enough in that case, but I'm inclined to agree that 'action_authorization should allow enable/disable not just enable -t/ disable -t
On 18/01/2007, at 10:03 AM, Joost Mulders wrote: > You need 'modify_authorization' besides 'action_authorization' to > be able to stop/start a service. Stop/start requires the enabled > property to be changed, that's why you need modify. > > HTH, Joost > > on top of > On Jan 17, 2007, at 11:38 PM, Estelle Agregado wrote: > >> What did I miss here? I am trying to grant myself permission to >> start/stop my spsms service... >> >> >> # grep echiquet /etc/user_attr >> echiquet:::auths=solaris.smf.manage.spsms >> # svcprop -p general/action_authorization spsms >> solaris.smf.manage.spsms >> # su - echiquet >> Sun Microsystems Inc. SunOS 5.10 Generic January 2005 >> -bash-3.00$ /usr/sbin/svcadm disable spsms >> svcadm: svc:/application/management/spsms:default: Permission denied. >> -bash-3.00$ >> >> >> This message posted from opensolaris.org >> _______________________________________________ >> smf-discuss mailing list >> smf-discuss at opensolaris.org > > -- > Joost Mulders + email: joost.mulders at sun.com > Technical Specialist + phone: +31-33-45-15701 > Client Solutions + fax: +31-33-45-15734 > Sun Microsystems + mobile: +31-6-5198-7268 > -= Anything not done right, has to be done again =- > > > > _______________________________________________ > smf-discuss mailing list > smf-discuss at opensolaris.org >
