[OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

[Gary Mills]

On Thu, Dec 24, 2015 at 03:24:25PM +0300, Alexander Pyhalov wrote:
> On 12/23/2015 15:47, Jim Klimov wrote:
> >23 декабря 2015 г. 4:29:16 CET, Lou Picciano <loupicciano at comcast.net> пишет:
> 
> >>If it wasn't set, it is set to 'NP'. This is necessary for zlogin to work correctly.
> >
> >Why is that? Who is 'zlogin -S' for? ;) e.g. zone shutdown scripts use it for low-level access, and zone-installer maybe too...
> >
> 
> I'd prefer this, I wouldn't like to tell everyone: now you have to
> use "zlogin -S".

The man page for zlogin says this:

            Use of this option requires the authorization
            solaris.zone.manage/zonename.

So, it does have security.

-- 
-Gary Mills-		-refurb-		-Winnipeg, Manitoba, Canada-