Margot Miller writes:
> > > The other problem I hear wrt zones is that the O/S
> > > administator is not the application administrator and
> > > that there would have to be some communication
> > > between the two to create a zone.
> 
>   The argument I heard was that having to ask the O/S
>   administrator to even set up a zone is problematic.
>   Once the zone is in place, things are fine.  

Yes, that's a potential issue.  The flip side of that issue is that
bits buried in some user's home directory will be unknown to the
system administrator, and thus won't be patched or handled during
upgrade.

Even if the check for UID 0 is removed, we currently have no higher-
level design that accounts for the issues that arise with arbitrary
software installation.

-- 
James Carlson, KISS Network                    <james.d.carlson at sun.com>
Sun Microsystems / 1 Network Drive         71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677

Reply via email to