lcokstat delegation

From: Arunkumar Arumugam (aarumuga@gmail.com)
Date: Thu Aug 25 2005 - 13:41:27 EDT


Hi Everybody-
I am trying to relax the permissions to execute the lockstat command
other than root user.

Operating system -Solaris 2.6 and 2.8

Usually the lockstat command access is restricted to root user - as
per the man page - it would incur a significant small load on the
system.
I am trying to delegate the access to a small group of users. by
changing the /dev/lockstat permission to 660 and owned by root and
group "restricted". and also changing the /etc/minor_pem lockstat stat
info to accomodate the change
lockstat@... 600 root sys
to
lockstat@... 660 root "restricted"
I tested and it works as expected.

Pls let me know , if I should consider anything more before putting
this into production.

Thanks
Arun A
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:31:23 EDT