[indiana-discuss] "no scripting zone" and isaexec(3C) == architectural

Dave Miner Dave.Miner at Sun.COM
Mon Jun 15 07:22:31 PDT 2009


Bernd Schemmer wrote:
> Hi,
> 
>>> You'd write an SMF service (start method included) that does all the
>>> configuration, then you'd pacakage it (with corresponding dependencies
>>> on the pkgs that deliver the Oracl DB product), and you'd add this pkg
>>> to the incorporation that your machines install.
> 
> 
> Arrg -  and that should be more secure than using a postinstall script???
> 

Yes, it certainly should be; you can precisely control the privileges 
used for executing the service start method, which may well be far less 
than required to install software.

> 
> Sorry, but using an SMF Service for configuring an application makes 
> developing of packages more complicated and will lead to lot of new 
> errors ....
> 

That is far from a given.  In the short run, it requires some learning, 
but in the long run it will be a more stable execution environment than 
any sort of scripting in SVR4 packages ever provided.

Dave



More information about the indiana-discuss mailing list