Hi All, I'm working on a project where we have a new daemon that we want controlled by smf to support a specific hardware feature for a given platform. What we'd like would be to have this daemon start automatically and thus have it enabled by default, but this goes against the info at http://hub.opensolaris.org/bin/view/Community+Group+arc/SMF-policy
"Services must be delivered (by manifest or programatically) disabled by default to align with Sun's security goals. Projects impacted by Appendix C, must consult with the ARC to determine if this aspect of the policy is applicable." Our plan was to have it enabled by default on all x86 platforms and then have it exit and disable itself if it determines that hardware does not support this specific feature. So I'm assuming we need to go to PSARC to figure out if this approach is acceptable or is there a different ARC we'd be going to? I'm also unclear about "Services must include an appropriate RBAC profile and set of authorizations for manipulating the service and its specific configuration." If our service has no configuration, then I think we don't need the above. Is that correct? I'm also looking for a volunteer to review the manifest to make sure all of the required fields are there and it is as secure as possible. Thanks, Mike -- This message posted from opensolaris.org
