Derek Crudgington writes: > tomcat at opensolaris:~# auths > solaris.smf.modify.tomcat,solaris.device.cdrw,solaris.profmgr.read, > solaris.jobs.user,solaris.mail.mailq,solaris.device.mount.removable, > solaris.admin.usermgr.read,solaris.admin.logsvc.read, > solaris.admin.fsmgr.read,solaris.admin.serialmgr.read, > solaris.admin.diskmgr.read,solaris.admin.procmgr.user,solaris.compsys.read, > solaris.admin.printer.read,solaris.admin.prodreg.read, > solaris.admin.dcmgr.read,solaris.snmp.read,solaris.project.read, > solaris.admin.patchmgr.read,solaris.network.hosts.read, > solaris.admin.volmgr.read > > tomcat at opensolaris:~# svccfg -s tomcat:dig > svc:/application/tomcat:dig> listprop > fs-local dependency > fs-local/entities fmri svc:/system/filesystem/local > fs-local/grouping astring require_all > fs-local/restart_on astring none > fs-local/type astring service > start method > start/action_authorization astring solaris.smf.modify.tomcat > start/exec astring > /export/home/tomcat/bin/startup.sh > start/group astring tomcat > start/limit_privileges astring :default > start/modify_authorization astring solaris.smf.modify.tomcat > start/privileges astring :default > start/project astring :default > start/resource_pool astring :default > start/supp_groups astring :default > start/timeout_seconds count 60 > start/type astring method > start/use_profile boolean false > start/user astring tomcat > start/value_authorization astring solaris.smf.modify.tomcat > start/working_directory astring :default > start/environment astring JAVA_HOME=/usr/jdk/jdk1.6.0 > stop method > stop/action_authorization astring solaris.smf.modify.tomcat > stop/exec astring > /export/home/tomcat/bin/shutdown.sh > stop/modify_authorization astring solaris.smf.modify.tomcat > stop/timeout_seconds count 60 > stop/type astring method > stop/value_authorization astring solaris.smf.modify.tomcat > stop/environment astring JAVA_HOME=/usr/jdk/jdk1.6.0 > general framework > general/action_authorization astring solaris.smf.modify.tomcat > general/modify_authorization astring solaris.smf.modify.tomcat > general/value_authorization astring solaris.smf.modify.tomcat > general/enabled boolean false > restarter framework NONPERSISTENT > restarter/start_pid count 497 > restarter/start_method_timestamp time 1170965890.516786000 > restarter/start_method_waitstatus integer 0 > restarter/logfile astring /var/svc/log/application-tomcat: > dig.log > restarter/transient_contract count > restarter/contract count > restarter/auxiliary_state astring none > restarter/next_state astring none > restarter/state astring disabled > restarter/state_timestamp time 1170966410.570448000 > restarter_actions framework NONPERSISTENT > restarter_actions/refresh integer > restarter_actions/maint_off integer > svc:/application/tomcat:dig> setprop general/action_authorization = astring: > solaris.smf.modify > Permission denied. > > Above shows I have modify authorization to general but I get permission > denied when trying to modify a general property. > > Derek
general/action_authorization is special. I'm still looking at the code to better understand why. Unfortunately, I've run out of time for today, but will try to get you more information on Monday. Try modifying other general/ properties. I have been able to do this on my test machine, although it is real easy to shoot yourself in the foot when messing with the general/ properties. tom
