Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Aric Gregson
--On 8/7/09 4:41 PM -0700 Scott Rotondo sent: > Glenn Faden wrote: >> Aric Gregson wrote: >>> On 8/7/09 2:18 PM, Glenn Faden wrote: Please verify that Primary Administrator is still /etc/security/prof_attr. >>> Actually, no. Why not?? >> Good question. I suspect it is related to the new

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Scott Rotondo
Glenn Faden wrote: > Aric Gregson wrote: >> On 8/7/09 2:18 PM, Glenn Faden wrote: >>> Please verify that Primary Administrator is still >>> /etc/security/prof_attr. >> Actually, no. Why not?? > Good question. I suspect it is related to the new SMF service, > svc:/system/rbac. This is supposed to

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Aric Gregson
On 8/7/09 4:23 PM, Glenn Faden wrote: > Aric Gregson wrote: >> On 8/7/09 3:20 PM, Glenn Faden wrote: >>> Aric Gregson wrote: On 8/7/09 2:18 PM, Glenn Faden wrote: > Please verify that Primary Administrator is still > /etc/security/prof_attr. Actually, no. Why not?? >>> Good ques

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Glenn Faden
Aric Gregson wrote: > On 8/7/09 3:20 PM, Glenn Faden wrote: >> Aric Gregson wrote: >>> On 8/7/09 2:18 PM, Glenn Faden wrote: Please verify that Primary Administrator is still /etc/security/prof_attr. >>> Actually, no. Why not?? >> Good question. I suspect it is related to the new SMF se

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Aric Gregson
On 8/7/09 3:52 PM, Scott Rotondo wrote: > In the meantime, you can fix this problem by putting back the line > that used to be there: > >> % cat /etc/security/exec_attr | grep "Primary" >> Primary Administrator:suser:cmd:::*:uid=0;gid=0 > > Make sure there is a Primary Administrator line in > /et

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Scott Rotondo
Aric Gregson wrote: > On 8/7/09 1:56 PM, Valerie Bubb Fenwick wrote: >> >> what do you see when this fails? can you show us an actual >> example of trying to run "pfexec "? > Examples include: > > % pfexec gedit /var/share/lxde/openbox/menu.xml -> cannot save changes > on file > -rw-r--r-- 1 ro

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Aric Gregson
On 8/7/09 3:20 PM, Glenn Faden wrote: > Aric Gregson wrote: >> On 8/7/09 2:18 PM, Glenn Faden wrote: >>> Please verify that Primary Administrator is still >>> /etc/security/prof_attr. >> Actually, no. Why not?? > Good question. I suspect it is related to the new SMF service, > svc:/system/rbac.

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Aric Gregson
On 8/7/09 1:56 PM, Valerie Bubb Fenwick wrote: > > what do you see when this fails? can you show us an actual > example of trying to run "pfexec "? Examples include: % pfexec gedit /var/share/lxde/openbox/menu.xml -> cannot save changes on file -rw-r--r-- 1 root bin 3.2K Aug 4 11:4

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Glenn Faden
Aric Gregson wrote: > On 8/7/09 2:18 PM, Glenn Faden wrote: >> Please verify that Primary Administrator is still >> /etc/security/prof_attr. > Actually, no. Why not?? Good question. I suspect it is related to the new SMF service, svc:/system/rbac. This is supposed to merge existing entries with

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Aric Gregson
On 8/7/09 2:18 PM, Glenn Faden wrote: > Please verify that Primary Administrator is still > /etc/security/prof_attr. Actually, no. Why not??

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Glenn Faden
aric wrote: > I am wondering if there is a bug? > > % cat /etc/security/exec_attr | grep "Primary" > Primary Administrator:suser:cmd:::*:uid=0;gid=0 > > # usermod -P'Primary Administrator' mylogin > UX: usermod: ERROR: Primary Administrator is not a valid profile name. > Choose another. > > % id

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread Valerie Bubb Fenwick
HI Aric - what do you see when this fails? can you show us an actual example of trying to run "pfexec "? I thought I had a problem with profiles on my machine, but it turns out I was trying to pfexec from a directory that was only readable by me (not the super user), which caused problems for the

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-07 Thread aric
I am wondering if there is a bug? % cat /etc/security/exec_attr | grep "Primary" Primary Administrator:suser:cmd:::*:uid=0;gid=0 # usermod -P'Primary Administrator' mylogin UX: usermod: ERROR: Primary Administrator is not a valid profile name. Choose another. % id -a uid=100(mylogin) gid=100(m

Problem with pfexec and Privileges after upgrade 114->117->119

2009-08-04 Thread aric
Hello, I have been using the rights profile of 'Primary Administrator' for some time now so that I can use pfexec appropriately, like root. After the last upgrade from snv_109->114 I found that I had to install SUNWwbcor to get the Primary Administrator back. However, after the snv_117 upgrade