On Wed, Feb 14, 2007 at 02:03:09PM -0600, Tom Haynes wrote: > What about the case where the customer wants to administer the zone they > purchased > and they do not want the global zone admins to have local access to > their data?
The global zone admin (all privileged user) can do _anything_ (e.g., load a kernel module and go from there).
