In-kernel pfexec implementation. [PSARC/2009/377 FastTrack timeout 07/10/2009]

[Darren J Moffat]

Joerg Schilling wrote:
> Darren J Moffat <Darren.Moffat at sun.com> wrote:
> 
>>> So implementing a way to switch on/off the pfexec feature in a running shell 
>>> just does the same in a more convenient way.
>> Please take this discussion to security-discuss at opensolaris.org it is 
>> not relevant to this case.
> 
> If you believe this, why didn't you tell it to Casper when he started this 
> subthread?

I was giving the benefit of the doubt that it might be relevant to the 
case at hand given the discussion you and Casper have been having and 
the direction it appears to be going in I've now (not back then) 
determined I don't believe it relevant to the case under review.

Just giving you both a little time to explore before asking that we stay 
on topic for the specific changes under review rather than branching out 
in the the greater topic.

I'm happy to see the discussion but I don't want it to detract from the 
review of this case hence the suggestion to move it elsewhere.

-- 
Darren J Moffat