Quoth Tom Whitten on Fri, Feb 09, 2007 at 12:41:03PM -0700: > Derek Crudgington writes: ... > > svc:/application/tomcat:dig> setprop general/action_authorization = astring: > > solaris.smf.modify > > Permission denied. > > > > Above shows I have modify authorization to general but I get permission > > denied when trying to modify a general property. > > general/action_authorization is special. I'm still looking at the code to > better understand why. Unfortunately, I've run out of time for today, but > will try to get you more information on Monday.
As in smf_security(5), solaris.smf.manage is required to modify general/action_authorization. Otherwise, granting modification access to general would allow the user to grant himself authorization to perform actions. David
