In-kernel pfexec implementation. [PSARC/2009/377 FastTrack timeout 07/10/2009]

[Joerg Schilling]

Casper.Dik at sun.com wrote:

> >Will there be the possibility to turn on/off this feature like while the shell 
> >is running like I did implement in "bsh" and "sh" in 
> >ftp://ftp.berlios.de/pub/schily/ 
> >
> >set -P	# Turn on profile mode
> >set +P	# Turn off profile mode
> >
> >set -o profile	# Turn on profile mode
> >set +o profile	# Turn off profile mode
>
>
> No; that use is wrong.  A profile can be defined such that you can only
> run a few executables.  Being able to disable the "profileness" of a shell 
> is a bug because of that feature.

If you call this a bug, when will the documentation (best practice) bug from Indiana 
be fixed that is based on manually calling pfexec?

Jörg

-- 
 EMail:joerg at schily.isdn.cs.tu-berlin.de (home) Jörg Schilling D-13353 Berlin
       js at cs.tu-berlin.de                (uni)  
       joerg.schilling at fokus.fraunhofer.de (work) Blog: http://schily.blogspot.com/
 URL:  http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily