[indiana-discuss] "no scripting zone" and isaexec(3C) == architectural
Dave Miner
Dave.Miner at Sun.COM
Mon Jun 15 07:22:31 PDT 2009
Bernd Schemmer wrote:
> Hi,
>
>>> You'd write an SMF service (start method included) that does all the
>>> configuration, then you'd pacakage it (with corresponding dependencies
>>> on the pkgs that deliver the Oracl DB product), and you'd add this pkg
>>> to the incorporation that your machines install.
>
>
> Arrg - and that should be more secure than using a postinstall script???
>
Yes, it certainly should be; you can precisely control the privileges
used for executing the service start method, which may well be far less
than required to install software.
>
> Sorry, but using an SMF Service for configuring an application makes
> developing of packages more complicated and will lead to lot of new
> errors ....
>
That is far from a given. In the short run, it requires some learning,
but in the long run it will be a more stable execution environment than
any sort of scripting in SVR4 packages ever provided.
Dave
More information about the indiana-discuss
mailing list