Re: lcokstat delegation

From: Arunkumar Arumugam (aarumuga@gmail.com)
Date: Tue Aug 30 2005 - 12:03:01 EDT


Hi all-
I am reposting this, so if somebody has missed it. Pls let me know if i
shouldn't repost my question so that this wouldn't be
repeated in future.

I am trying to relax the permissions to execute the lockstat command
other than root user.

Operating system -Solaris 2.6 and 2.8

Usually the lockstat command access is restricted to root user - as
per the man page - it would incur a significant small load on the
system.
I am trying to delegate the access to a small group of users. by
changing the /dev/lockstat permission to 660 and owned by root and
group "restricted". and also changing the /etc/minor_pem lockstat stat
info to accomodate the change
lockstat@... 600 root sys
to
lockstat@... 660 root "restricted"
I tested and it works as expected.

Pls let me know , if I should consider anything more before putting
this into production.

Thanks
Arun A
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:31:27 EDT