I've updated the case materials with an updated spec from the project team. Full spec in case materials. Diffs, below.
176,178c176,178 < A Lighttpd Admin profile will be added to the system along with the < auths required to allow the Lighttpd Admin profile to manage the < lighttpd SMF service. --- > In order to allow non-root users to manage the Lighttpd SMF service > the following RBAC authorisations (auths) will be added to > /etc/security/auth_attr: 179a180,195 > solaris.smf.value.http/lighttpd14 > solaris.smf.manage.http/lighttpd14 > > A profile named "Lighttpd 14 Adminstrator" will be added to > /etc/security/prof_attr. > This Profile will only include the two authorisations specified above, > no additions will be made to /etc/security/exec_attr. > > The Profile will be supported by the addition to the SMF manifest for > svc:/network/http:lighttpd14 of the following properties: > > NAME TYPE VALUE > > action_authorization astring solaris.smf.manage.http/lighttpd14 > value_authorization astring solaris.smf.value.http/lighttpd14 -- Jyri J. Virkki - jyri.virkki at sun.com - Sun Microsystems