Shawn Walker wrote:
> Garrett D'Amore wrote:
>> Darren J Moffat wrote:
>>> I think both phases of this project are a very bad idea and I do not 
>>> approve of the strategy.
>>>
>>> The Solaris security team did a similar analysis for 'pfexec' vs 
>>> 'sudo' for almost identical reasons as this case.  Like this case we 
>>> planed to initially ship a symlink pfexec -> sudo and later enhance 
>>> pfexec with the functionality that sudo had.   In the end we choose 
>>> not to do that because it as more engineering effort, it would never 
>>> be perfect and there really was no harm in having the real sudo 
>>> installed on the system.  So that strategy was abandoned and now 
>>> Solaris/OpenSolaris has the real sudo.
>>>
>>> I strongly suggest that this case be withdrawn and a new case be 
>>> filed to just ship top.
>>>
>>> This is is also misnamed there are no prstat enhancements in this 
>>> case just a confusing symlink from prstat -> top.
>>>
>>> I'm think that prstat could do with some enhancements but this case 
>>> didn't actually provide any.
>>
>> As for me, I'd agree with phase 2, if phase 2 provides near-enough 
>> approximation of functionality that users are unlikely to notice the 
>> difference.  But phase 1 seems more and more like a terrible idea.
> 
> Phase 1 solves the problem of "I type top and nothing happens."

So we should ship the real top - or maybe a command that says "top not 
delivered yet use /usr/bin/prstat"

-- 
Darren J Moffat

Reply via email to