On 02/08/13 19:16, Edward Pilatowicz wrote:
On Fri, Feb 08, 2013 at 03:02:49PM +1300, Tim Foster wrote:
Hi there,
I've a changeset here that reduces console (and audit log) noise as
a result of some of our SMF service method scripts using 'su
pkg5srv' rather than running with an appropriate method-context,
affecting:
svc:/application/pkg/depot
svc:/application/pkg/system-repository
svc:/application/pkg/zones-proxyd
The changes use a permissive method_context (privileges='all') in
order to continue to write to /system/volatile, use existing cache
files owned by root, and (in the case of zones-proxyd) elevate
privileges when needed, but they do drop privileges as soon as they
can.
I'm also adding a pkgfmt step to the build to ensure our manifests
are well-formatted before packages are published.
https://cr.opensolaris.org/action/browse/pkg/timf/su-pkg5srv/su-pkg5srv-webrev/
Comments/questions would be most welcome,
lgtm.
thanks for doing this. the console messages have always really annoyed
me. ;)
also, wrt pkgfmt, yay! i remember when i suggested that the ips gate use
pkgfmt for it's manifests... that didn't go so well. ;) i'm happy to
see this finally happening.
That was before the pkgfmt v2 work I did. v2 largely resolves the
original objections.
-Shawn
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss