OpenSolaris

Printable Version Enter a New Search
Bug ID 5097247
Synopsis exec_attr should allow argument checking
State 4-Defer:No Resource Available (Accepted, but the fix may not be made soon.)
Category:Subcategory rbac:admin
Keywords
Responsible Engineer Gary Winiger
Reported Against s10_66
Duplicate Of
Introduced In solaris_8
Commit to Fix
Fixed In
Release Fixed
Related Bugs 6292044 , 5097246 , 4990747 , 6227468
Submit Date 4-September-2004
Last Update Date 31-July-2006
Description 
Since you only can assign execution attributes on individial programs, you must create wrapper scripts if you want to allow a profile to only use a specific set of arguments for that program.

E.g. if you want to allow the profile "Cron Management" to use svcadm to stop/start/restart svc:/system/cron:default you have to create a wrapper to make sure that the profile only is allowed to operate on that service.

A more generic solution is needed, where you can create execution profiles that can specify which arguments the profile is allowed to use.
 xxxxx@xxxxx.com 2004-09-04
Work Around 
N/A
Comments 
N/A