2008/046 Process Contract Decorations

[Antonello Cruz]

Nicolas Williams wrote:
> On Fri, Jan 25, 2008 at 07:40:55AM -0800, Antonello Cruz wrote:
>> Gary Winiger wrote:
>>> 	What Rights Profile is being proposed to grant ctrun privilege?
>> A new Rights Profile named "Process Contract Identifier" should be 
>> amended to this case.
>>
>>> 	And who should be granted this profile?
>> Users who are responsible for creating service-like collections of 
>> processes that the administrator has decided should be identified 
>> separately from services started by SMF
> 
> But will there be such users?  It strikes me that this is a privilege
> that only restarters will need, and those should be services themselves,
> able to obtain this privilege straight from svc.startd.
> 
> I.e., services that use ctrun to implement a restarter, or which use
> librestart may need this privilege, and they should have that privilege
> as part of the start method context.
> 
> I can't imagine applications that are not SMF services requiring this
> privilege (except, perhaps, for debugging).
I can think of development of new restartes or services that create 
contracts, which probably falls in your debugging set.

> 
> So a rights profile to go with this privilege seems unnecessary.
I agree it seems overkill to create a new Rights Profile. I don't feel 
strongly either way. What do others think?

Antonello