I think both phases of this project are a very bad idea and I do not 
approve of the strategy.

The Solaris security team did a similar analysis for 'pfexec' vs 'sudo' 
for almost identical reasons as this case.  Like this case we planed to 
initially ship a symlink pfexec -> sudo and later enhance pfexec with 
the functionality that sudo had.   In the end we choose not to do that 
because it as more engineering effort, it would never be perfect and 
there really was no harm in having the real sudo installed on the 
system.  So that strategy was abandoned and now Solaris/OpenSolaris has 
the real sudo.

I strongly suggest that this case be withdrawn and a new case be filed 
to just ship top.

This is is also misnamed there are no prstat enhancements in this case 
just a confusing symlink from prstat -> top.

I'm think that prstat could do with some enhancements but this case 
didn't actually provide any.

--
Darren J Moffat

Reply via email to