John Sonnenschein wrote:
> Hey everyone.
>
> So, I've been working on an RBAC module for Python to make Python
> priv-aware. I'm seeking any comments on it at the moment
>
> It's mostly just marshalling and unmarshalling arguments from C to
> PyObject*'s but it exposes all the user|exec|auth_attr functions and
> privileges(5) functions. It works the same way that the regular RBAC
> functions do ( which is to say, they don't grant you privileges you
> don't already have but you can drop privileges that you do have )
>
> I figure it's useful for things like adding a "Software Installation"
> profile that a SUID pkg(5) can check for on startup, maybe the ON gk
> can find some use for it, customers/community members can use it , etc.
>
>
> code here: http://cr.opensolaris.org/~error404/pyrbac.tar.gz
Very cool! Nice work John.. I'm sure someone will find it useful..
