On 04/11/12 15:17, Karen Tung wrote:
Hi Ethan,
On 04/11/12 02:06 PM, Ethan Quach wrote:
Karen,
On 04/11/12 11:40, Karen Tung wrote:
General comments and questions:
-------------------------------
- The PSARC case says this in the materials:
> The System Administrator profile will be updated to include the the
> Install Service Management profile, as setting up a system to be
> an install server should be a task the sys admin should be able to
> carry out.
I assume the above means that we want to add the "Install Service
Management"
profile to the System Administrator profile if the
install-installadm package is installed on the system. If that's
the case,
I do not see the corresponding prof_attr entry to add that.
Yes, that is what that means, but the System Administrator profile is
defined by a file living in the ON gate, and as far as I know you
can't piece-wise define a profile across separate files. So the plan
is to update the System Administrator profile as a separate and
subsequent bugfix.
I think you can piece-wise define it, as long as you put all
the pieces in /etc/security/prof_attr.d/.
OK, I didn't realize that could be done. So we'll add an additional
entry into *prof_attr.install%2Finstalladm* to define that as well.
thanks,
-ethan
For example,
-------------------------
ktung@kt-x220 {2597} pwd
/etc/security/prof_attr.d
ktung@kt-x220 {2598} grep "Console User" *
core-os:Console User:RO::\
core-os:Manage System as the Console User:\
library-audio-gstreamer:Console User:RO:::profiles=Desktop Removable
Media User
ktung@kt-x220 {2599}
ktung@kt-x220 {2608} profiles -p "Console User" info
name=Console User
desc=Manage System as the Console User
auths=solaris.system.shutdown,solaris.device.cdrw,solaris.smf.manage.vbiosd,solaris.smf.value.vbiosd
profiles=Desktop Removable Media User,Suspend To RAM,Suspend To
Disk,Brightness,CPU Power Management,Network Autoconf User
help=RtConsUser.html
ktung@kt-x220 {2609}
-------------------------
The "Console User" profile is already defined by the core-os package.
The "library-audio-gstreamer" package added the "Desktop Removable
Media User"
profile to the Console User profile. Notice that when I look at what
"Console User" is
defined as on my system, the "Desktop Removable Media User" is now
included.
Thanks,
--Karen
-ethan
_______________________________________________
caiman-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/caiman-discuss
_______________________________________________
caiman-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/caiman-discuss
