Darren J Moffat wrote:
> Brian Utterback wrote:
>>
>>
>> James Carlson wrote:
>>
>>> Creating a separate tiny root package allows the owner of a system
>>> with writable RBAC files but without a writable '/usr' to install the
>>> necessary bits to make this feature work.  If it's done as you're
>>> suggesting, as a single 'usr' type package with a postinstall, then
>>> the owner of such a machine simply cannot install the necessary RBAC
>>> bits, except by hand, as the 'usr' package is inapplicable.
>>>
>>
>> Maybe I am misunderstanding Darren, but I thought his proposal was to 
>> make the integration of ngrep into SFW also have the addition of the 
>> ngrep line into the default exec_attr file as a parallel but separate 
>> integration into ON, thus obviating the need to do any post/pre 
>> install anything at pkg install time.
>
> You understood me correctly.
>
I missed much of this thread and I'm not a PSARC member, so my vote 
doesn't count here, but...

If you can avoid it, please don't split your delivery across 
consolidations.  I would like to avoid adding places where we introduce 
a potential need to coordinate integrations and/or where any future 
orphaning that may occur.  There are several components in SFW that 
already deliver root packages with RBAC entries.

    -Norm


Reply via email to