-----Original Message-----
From: Darren J Moffat
Sent: 05/23/08 18:37
> Some other things I forgot to bring up in the previous email.
>
> What SMF method_credential is used for starting pen ?
> Basically what uid/gid does it run with and what privileges ?
> Hint the correct answer is likely NOT uid/gid 0 and all privileges. I
> would expect pen to run as the daemon (or noaccess) user account with
> net_privaddr (since it will need to bind to privielged ports).
Thanks.
But, I am not an expert of smf and security.
Last time I just write the smf manifest following some existing network ones.
Could you please tell me who could give me some more information about how to
write smf scripts with privilege (? or RBAC etc.?) ?
>
> I'm assuming it works in non global zones.
>
> --
> Darren J Moffat
--
Best regards,
Jia
