[webstack-discuss] [security-discuss] Apache 2.2 Service management using RBAC

[Jyri Virkki]

Seema Alevoor wrote:
>
> I'm trying to use RBAC for Apache 2.2 service management.
> I did the following changes. Please let me know if this is the right 
> approach ?
> I have also attached the diffs of the files modified. Kindly review.
> 
> Apache2 in SFW is configured to run as "webservd" user. To enable this user 
> to manage the Apache service,

Does webservd user need to be able to manage the apache smf service?

While that's the runtime uid of the apache process, I didn't expect
users to log in as webservd to run "svcadm enable apache22", or do they?


-- 
Jyri J. Virkki - jyri.virkki at sun.com - Sun Microsystems