tcpdump [PSARC/2009/147 FastTrack timeout 03/10/2009]

Rainer Orth ro at techfak.uni-bielefeld.de
Tue Mar 3 04:53:33 PST 2009


James Walker <jw137282 at sac.sfbay.sun.com> writes:

>     3.4.2 Authorization
>       (see http://opensolaris.org/os/community/arc/bestpractices/rbac-intro/ and
> 	   http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ and
> 	   http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/
>            for details)
>       Are there any setuid/setgid privileged binaries in the project?
>       [ ] Yes - ARC review required
>       [*] No - continue with next section (section 3.4.3)
>       
>       If yes then are the setuid/setgid privileges handled by the use of roles?
>       [ ] Yes
>       [ ] No - ARC review required

Shouldn't tcpdump be added to the Network Management profile in
/etc/security/exec_attr, just like snoop is?

	Rainer

-- 
-----------------------------------------------------------------------------
Rainer Orth, Faculty of Technology, Bielefeld University



More information about the opensolaris-arc mailing list