James Dickens blog entry today demonstrates one concerning bit of data visible to non-globalzones via kstats. http://uadmin.blogspot.com/2007/09/in-zone-but-where.html
There are other stats that could fall in the same category both now or in the future. Which raises the question: is there a method by which to mask out kstats that are visible to non-globalzones? I noticed that the iscsi initiator nodename (IQN) isn't visable which makes me think there is already a way to mask or hide values, but digging through ON I couldn't figure out how. Its easy enough to obfuscate the alias as a short term workaround, but a longer term solution is needed. Any thoughts? benr. This message posted from opensolaris.org _______________________________________________ opensolaris-code mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/opensolaris-code
