[Dropped tools-discuss from the cc list.  This thread doesn't seem to
be appropriate for that list.]

Peter Memishian writes:
> 
>  > > sudo you might get some pushback, as Sun already has rbac
>  > > (and has been shipping it since, I believe, S7 or S8)
>  > 
>  > Perhaps sudo would be covered by any "more friendly for Linux users" 
> effort?
> 
> Perhaps.  Personally, I'm not passionate about sudo or rbac, but I do
> worry about ending up with multiple frameworks that attempt to solve the
> same sets of problems.

More importantly, sudo is a setuid application and thus a potential
security and auditing hole.  We need to have some very careful reviews
of it before just tossing it into the WOS.

I realize that it's used on many platforms (including [Open]Solaris),
and that many people find it quite useful (and easier than RBAC), but
we have some quality standards to uphold.

If you go ahead with this, I would suggest breaking out sudo into a
separate case.  It's likely to draw a lot of controversy where the
others would not.

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 1 Network Drive         71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677

Reply via email to