> In another mail in this thread I wrote:
> 
> "One way to do that is to add a privileged helper that checks for the 
> solaris.system.shutdown authorization and then sets the transient 
> override (probably using method 1.1.3). It might be simplest to make 
> that helper setuid 0, because a mechanism that uses a "Shutdown User" 
> profile to do this via pfexec is harder to remove, if the issue gets 
> fixed on the fast reboot or SMF end."

Hi Joerg,

Thanks for you advice. I think we do not need a new "helper" in this
case, because ConsoleKit can do this for us. It runs with root privilege
and it's easy to add new interfaces to it to support fast reboot.

Regards,

Jedy
> 
> I still think that this would be an appropriate solution until the 
> architectural disconnect that makes this so hard can be fixed.
> 
> - J?rg
> 


Reply via email to