>Yes, I'm convinced that we have three distinct authorisations here:
>
>       solaris.pkg.install
>       solaris.pkg.update
>       solaris.pkg.uninstall
>


We have precedents which allow things like:

        solaris.pkg.update/system/locale/*


We could use that too (and allow importing additional needed packages 
without requiring them listed)

Casper

_______________________________________________
security-discuss mailing list
[email protected]

Reply via email to