[EMAIL PROTECTED] writes:
> >> I tried the kill and AFAICT root in the global zone can kill a process
> >> in a non-global zone:
> >
> > OK.  I must be misremembering this.  I thought the restriction was
> > more complex than that.
> 
> Within the global zone, the ability to kill a process in a non-global
> zone is controlled by the "proc_zone" privilege.  Normally, only a user
> with all privileges will have this ability unless modified via RBAC.

Thanks.  ;-}

I _knew_ it wasn't as simple as killing a process in the global zone.

-- 
James Carlson, KISS Network                    <[EMAIL PROTECTED]>
Sun Microsystems / 1 Network Drive         71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677
_______________________________________________
zones-discuss mailing list
zones-discuss@opensolaris.org

Reply via email to