On 02/08/13 19:16, Edward Pilatowicz wrote:
On Fri, Feb 08, 2013 at 03:02:49PM +1300, Tim Foster wrote:
Hi there,

I've a changeset here that reduces console (and audit log) noise as
a result of some of our SMF service method scripts using 'su
pkg5srv' rather than running with an appropriate method-context,
affecting:

svc:/application/pkg/depot
svc:/application/pkg/system-repository
svc:/application/pkg/zones-proxyd

The changes use a permissive method_context (privileges='all') in
order to continue to write to /system/volatile, use existing cache
files owned by root, and (in the case of zones-proxyd) elevate
privileges when needed, but they do drop privileges as soon as they
can.

I'm also adding a pkgfmt step to the build to ensure our manifests
are well-formatted before packages are published.

https://cr.opensolaris.org/action/browse/pkg/timf/su-pkg5srv/su-pkg5srv-webrev/

Comments/questions would be most welcome,

lgtm.

thanks for doing this.  the console messages have always really annoyed
me.  ;)

also, wrt pkgfmt, yay! i remember when i suggested that the ips gate use
pkgfmt for it's manifests...  that didn't go so well.  ;) i'm happy to
see this finally happening.

That was before the pkgfmt v2 work I did. v2 largely resolves the original objections.

-Shawn

_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to