Sarah Jelinek wrote: >> - Reduce or eliminate need to rely on root privileges and >> root-owned artifacts, thereby meeting higher security >> and responsibility partitioning standards. >> > We have this today with zones. See below....
With the HUGE overhead of requiring a new IP address. Zones are great but they don't solve the same problem. I've been beaten around the head by several project teams during WSARC reviews for suggesting this, and I get the difference now! Gladly the same project teams also get Zones and understand when they are useful too. > zones are nice because you wouldn't have to modify pkgs at all, and you Hah! Zones more than any other project has caused the most packaging changes as a result of new required things in packages for the correct things to happen in some cases. > could give each user a zone, and they can be root in the zone and > install pkgs. This might be too heavyweight for what you are trying to > achieve. So how does that work for you logging into a Sun Ray server that has only one IP address and installing in package format your own copy of firefox ? Zones don't solve all the same problems this solves. We have some HUGE customers asking for this functionality and they do understand and use Zones but this functionality is complementary to Zones. -- Darren J Moffat
