Hi Raymond,
Raymond Xiong said the following on Thursday 02 April 2009 12:07 PM:
> I am porting ejabberd, which is an XMPP server, and need to
> add two new authorizations ("solaris.smf.manage.ejabberd" and
> "solaris.smf.value.ejabberd"). I checked existing packages
> on sfwnv gate and found some packages (lighttpd14, stunnel,
> etc) introduced new authorizations too, but I didn't see
> they had any code to do that.
>
If you intend to add new RBAC authorizations for the product your are
integrating, you could add those entries in the RBAC files
(auth_attr/exec_attr/prof_attr/user_attr) present in the sfwnv gate in
"usr/src/common/rbac" dir.
> Does that mean I just need to request those new authorizations
> (for example, by filling a form) during integration time
AFAIK, there is no form which needs to be filled up. I guess you just
need to mention about these authorizations in your ARC case materials.
During integration, you just need to have the changes you have made to
RBAC files (auth_attr/exec_attr/prof_attr/user_attr) listed in the
webrev so that someone could review it.
Also make sure that the pkginfo of the package which is installing the
SMF service manifest and method files have 'rbac' listed under CLASSES
field. Some thing like this :
CLASSES="none manifest rbac"
HTH.
Thanks,
Srirama