Brian Cameron wrote:
 > Second, I get the zone names by running this command:
 >
 > /usr/sbin/zoneadm list -cv | grep running | grep -v global |
 >     nawk '{ print $4}'
 >
 > Then I loop over the values returned.  For each value, lets
 > call it $ZONE_PATH, I then try to access the user's home
 > directory by accessing:
 >
 > $ZONE_PATH/root/home/userid

   Don't do this.  It is fragile, complicated, and dangerous.  Instead,
   zlogin to the zone and run your cleanup script on ~user from there.

   (I'll let the security folks chime in on how -- zones aside --
   finding and deleting users' files as root is fragile, complicated,
   and dangerous.)

   Dave


Reply via email to