Where are privileges going?

2009-01-30 Thread Will Young
Glenn Faden wrote: > Darren Reed wrote: > >> I don't know if what I'm really searching for is >> PRIV_NET_FIREWALL or more. What I do know is that >> PRIV_SYS_NET_CONFIG seems very wrong because of >> the scope and nothing else in PRIV_NET_* seems >> to be well suited to the task on my mind. >>

[nfs-discuss] Code review for 6775211: mirror mounts use the zcred; should use caller's c

2009-01-30 Thread Tom Haynes
Nicolas Williams wrote: > On Fri, Jan 30, 2009 at 03:34:19PM -0800, Tom Haynes wrote: > >> http://bugs.opensolaris.org/view_bug.do?bug_id=6775211 >> >> For more than you want to know about this bug, see >> http://blogs.sun.com/tdh/entry/be_careful_of_assumptions >> >> The basic issue is if a NFS

[networking-discuss] [smf-discuss] Code review request - Solaris host-based firewall (updated)

2009-01-30 Thread David Powell
David Powell wrote: > Tony Nguyen wrote: >> Dave, >> >> See my responses inline and the updated webrev at: >> >> http://cr.opensolaris.org/~tonyn/firewall13Jan2009-inc/ >> http://cr.opensolaris.org/~tonyn/firewall13Jan2009/ > >I'm still working through ipf_include.sh. ... and servinfo.c.

[nfs-discuss] Code review for 6775211: mirror mounts use the zcred; should use caller's c

2009-01-30 Thread Nicolas Williams
On Fri, Jan 30, 2009 at 03:34:19PM -0800, Tom Haynes wrote: > http://bugs.opensolaris.org/view_bug.do?bug_id=6775211 > > For more than you want to know about this bug, see > http://blogs.sun.com/tdh/entry/be_careful_of_assumptions > > The basic issue is if a NFSv4 client has user credentials, but

Where are privileges going?

2009-01-30 Thread Glenn Faden
Darren Reed wrote: > Over the last few years, I've watched numerous PSARC > cases come in and be caught up with not using the > correct privilege as part of their design. > > Now I find myself thinking about doing "access control" > for various objects with IPFilter and by default I start > thinkin