From sacadmin Tue Jan 15 16:18:33 2008 Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0G0IXiW004797; Tue, 15 Jan 2008 16:18:33 -0800 (PST) Received: (from gww@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id m0G0IXLm004793; Tue, 15 Jan 2008 16:18:33 -0800 (PST) Date: Tue, 15 Jan 2008 16:18:33 -0800 (PST) From: Gary Winiger Message-Id: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> To: PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com Cc: Riny.Qian@sun.com, lsarc@sac.eng Subject: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] Status: RO Content-Length: 10396 I'm self sponsoring this case. It requests a Patch release binding and a Committed interface Taxonomy. Full diff marked man pages for policy.conf(4) and chkauthattr(3secdb) are in the case directory. pfexec(1), sys-suspend(1M), getexecuser(3secdb), user_attr(4) are unmodified and included for reference. I apologize for the length, and felt the background, case bounds and relationship with virtal consoles details would be helpful to the understanding. The timer is set for 23 Jan. 2008. Gary.. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Background: =========== The legacy concept of a "workstation owner" exists in sys-suspend and /etc/default/sys-suspend which delivers with PERMS=console-owner. That legacy defines whomever is logged in on /dev/console as being permitted to execute /usr/openwin/bin/sys-suspend which in GUI mode will present a "suspend"/"shutdown"/"cancel" menu and in non-GUI mode just do the action requested without confirmation (as I found out on my test machine moments ago, now being power cycled to come back to life ;-). Execution Profiles for Restricted Environments [PSARC/1997/332] established the Solaris Role Based Access Control (RBAC) infrastructure of Rights Profiles, Authorizations, Execution Profiles, and roles. 1997/332 provided for granting users "rights" beyond what they would have had previously base on their userID. It also provided for roles that could be granted to users and the ability for a granted user to extend "rights" by "entering" (su(1M)) a role. Neither of these mechanisms provides for a user to "automatically" some times have "rights" and sometime not have those rights. The project team (me) has recently been involved in various discussions on how to control access to such things as WiFi configurations, Gnome Power Management [LSARC/2007/702], GNOME Power Management Support [PSARC/2008/021]. Other applicable areas could include things a workstation or laptop "owner" might just expect to do. However, granting "normal users" these rights in all situations is likely to be undesirable. Having "normal users" enter roles to gain this class of rights makes desktop tools more complicated. Rights Profiles are "hierarchical": that is they can contain other Rights Profiles in addition to authorizations and commands. Case Bounds: =========== The pre-review discussion wondered far and wide, so I'd like to say what this project is not and set the expectations of its scope: The project team is agnostic with respect to the possible set of terms used to instantiate the elements of this project, as long as they are parallel and imply owership rather than casual use. The project choose Workstation Owner because that was a term that had been used in conversation. System Owner, Machine Owner, and other terms seem equally agreeable. This project has nothing to do with logindevperm device processing (beyond that the login device owner set to the login user). This project has nothing to do with how printers, USB devices, audio, flash memory, etc. is associated with a user/process. This project has nothing to do with how the preceding moves around in the face of Virtual Consoles [PSARC/2006/591]. This project is independent of the current (CDE and likely obsoleted) sys-suspend command or configuration. This project makes no API changes to existing interfaces. This project does not populate the Workstation Owner Rights Profile (other projects, such as NWAM and Power Management need to submit cases to populate the Workstation Owner Rights Profile). The bounds of this case are to: 1) define the concept of a "workstation owner", 2) define the mechanism (an automatically assigned Rights Profile) for granting the workstation owner additional "Rights" than that user would have if not granted by user_attr(4), policy.conf(4). 3) define a "Workstation Owner" Rights Profile name (in prof_attr(4)) with "empty" contents, for others to populate. Proposal: ========= Define an infrastructure for automatically granting additional Rights Profiles to users who are identified as the "owner" of a Solaris workstation (or laptop). Define the "workstation owner" to be owner of the "/dev/console" device as set by the various login applications through di_devperm_login(), Interface for Enforcing /etc/logindevperm [PSARC/2003/612]. Note for Virtual Console [PSARC/2006/591], the owner of "/dev/console" is defined as "the first logged in user on the consoles" /dev/vt[1-6] the serial line virtual consoles. As 2006/591 has not yet delivered and when delivered isn't enabled by default, this project team intends to work with the Virtual Console project team, Riny Qian, Cc-ed here to determine if there are additional interfaces needed to define "workstation owner". A preliminary thought might be a property in the virtual console service manifest to specify a graphical vt as the "owner" if "/dev/console" was un-owned (i.e., root as is the case for sys-suspend(1M)). Details: ======== Add a key=value, "WORKSTATION_OWNER=", to policy.conf(4) which defines the name of the workstation owner Rights Profile. If present, the value is interpreted as a list of Rights Profiles to be granted to the "workstation owner". Adding a key=value allow the admin the ability to disable the feature if that is desired. Modify chkauthattr(3secdb) to process Rights Profiles to include processing the WORKSTATION_OWNER if the user is the workstation owner. chkauthattr() takes an authorization name (such as "solaris.admin.printer") and a user name (such as "gww") and returns whether the user is granted that authorization, from either the AUTHS_GRANTED= list of authorizations, the PROFS_GRANTED= (and from this proposal, the WORKSTATION_OWNER=) list of profiles found in policy.conf(4), or the list of authorizations and profiles found for that user in user_attr(4). The WORKSTATION_OWNER list of Rights Profiles is inserted between the list directly granted to the user (via user_attr(4)) and the existing policy.conf(4) "PROFS_GRANTED=" list. The list is inserted there rather than appended because pfexec(1) stops at first match and by default the PROFS_GRANTED list is "Basic Solaris User" whose default profiles list consists singly of "All" which consists of a single command wild card. pfexec(1) stops at first match, so having the All profile before any other profile stops searching for commands. Modify pfexec(1) -- really getexecuser(3secdb) -- to search the WORKSTATION_OWNER Rights Profile list before searching any other if the calling user is the workstation owner. Define an empty "Workstation Owner" Rights Profile for other projects to populate. Deliver the WORKSTATION_OWNER policy.conf(4) entry defined to be the Workstation Owner Rights Profile (WORKSTATION_OWNER=Workstation Owner). On upgrade add "WORKSTATION_OWNER=Workstation Owner" if there is no WORKSTATION_OWNER. This follows the practice of AUTHS_GRANTED and PROFS_GRANTED. Note: the non "console-owner" configurations in /etc/default/sys-suspend, "all, "-", "" are all covered by the existing RBAC infrastructure. For "all", configure policy.conf(4) PROFS_GRANTED key to include the "Workstation Owner" Rights Profile; for "-" (none), comment out or remove the policy.conf(4) WORKSTATION_OWNER key; for "", configure user_attr(4) for the enumerated users to include the "Workstation Owner" Rights Profile in their list of Rights Profiles. policy.conf(4): DESCRIPTION The policy.conf file provides the security policy configura- tion for user-level attributes. Each entry consists of a key/value pair in the form: key=value The following keys are defined: PROFS_GRANTED Specify the default set of profiles granted to all users. This entry is interpreted by chkauthattr(3secdb) and getexecuser(3secdb). The value is one or more comma-separated profiles defined in prof_attr(4). + WORKSTATION_OWNER + Specify an additional default set of profiles granted to + the "workstation owner" user. This entry is interpreted + by chkauthattr(3secdb) and getexecuser(3secdb). The + value is one or more comma-separated profiles defined + in prof_attr(4). PRIV_DEFAULT and PRIV_LIMIT Settings for these keys determine the default privileges +NOTES + The "workstation owner" is defined as the owner of \fI/dev/console\fP. chkauthattr(3secdb): SYNOPSIS int chkauthattr(const char *authname, const char *username); DESCRIPTION The chkauthattr() function verifies whether or not a user has a given authorization. It first reads the AUTHS_GRANTED key in the /etc/security/policy.conf file and returns 1 if it finds a match for the given authorization. If chkau- | thattr() does not find a match, + if the \fIusername\fP is the + name of the "workstation owner", it reads the WORKSTATION_OWNER + key in /etc/security/policy.conf and return 1 if the given + authorization is in any of the profiles specified in the + WORKSTATION_OWNER keyword, then it reads the PROFS_GRANTED key in /etc/security/policy.conf and returns 1 if the given authorization is in any profiles specified with the PROFS_GRANTED keyword. If a match is not found from the default authorizations and default profiles, chkauthattr() reads the user_attr(4) database. If it does not find a match in user_attr, it reads the prof_attr(4) database, using the list of profiles assigned to the user, and checks if any of the profiles assigned to the user has the given authoriza- tion. The chkauthattr() function returns 0 if it does not find a match in any of the three sources. A user is considered to have been assigned an authorization if either of the following are true: o The authorization name matches exactly any authori- zation assigned in the user_attr or prof_attr databases (authorization names are case-sensitive). o The authorization name suffix is not the key word grant and the authorization name matches any authorization up to the asterisk (*) character assigned in the user_attr or prof_attr databases. +NOTES + The "workstation owner" is defined as the owner of \fI/dev/console\fP. From sacadmin Wed Jan 16 02:07:29 2008 Received: from dm-eng-02.sfbay.sun.com (dm-eng-02 [129.146.11.32]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GA7TFT014935 for ; Wed, 16 Jan 2008 02:07:29 -0800 (PST) Received: from gmp-eb-mail-2.sun.com (gmp-eb-mail-2.EU.Sun.COM [192.18.6.24]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GA7SZn036189 for ; Wed, 16 Jan 2008 02:07:28 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12]) by gmp-eb-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m0GA7MXj019060 for ; Wed, 16 Jan 2008 10:07:22 GMT Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JUQ00201DMLRA00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for lsarc@sac.eng.sun.com; Wed, 16 Jan 2008 10:07:22 +0000 (GMT) Received: from [129.156.173.199] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JUQ002YMERZGW00@fe-emea-09.sun.com>; Wed, 16 Jan 2008 10:07:12 +0000 (GMT) Date: Wed, 16 Jan 2008 10:07:11 +0000 From: Darren J Moffat Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> Sender: Darren.Moffat@sun.com To: Gary Winiger Cc: PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Message-id: <478DD74F.6070106@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 1249 The architecture I have no issues with. The terminology I have serious issues with. "Workstation" could to some people imply a difference between laptop, desktop, workstation, server. Best not to use that term since what "type" of hardware the machine is or what "function" it servers isn't relevant here. "Owner" is even worse it isn't the person that legally owns the system. Yes I know it is about the UNIX permissions owner of the device but that is really an implementation issue. This term won't translate well into other languages and even causes confusion in English (at least to me and the few techy and semi-techy people I run this by). I think a better term is "Console User". The functionality in the case applies to the system "Console" regardless of wither this is a laptop, workstation, desktop, server or all (or some new term). "User" because this has nothing to do with ownership of the machine but about which user is currently using the console. "Console User" is also used in other platforms for similar or near identical functionality. This is an important point because it means that people will more easily find this functionality on Solaris rather than assuming it doesn't exist. -- Darren J Moffat From casper@holland.sun.com Wed Jan 16 02:19:45 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GAJjcX015015 for ; Wed, 16 Jan 2008 02:19:45 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m0GAJiYh015396 for <@sunmail2sca.sfbay.sun.com:psarc-ext@Sun.COM>; Wed, 16 Jan 2008 02:19:45 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUQ00L09FCWNJ00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Wed, 16 Jan 2008 02:19:44 -0800 (PST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUQ00JF5FCVI190@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Wed, 16 Jan 2008 02:19:44 -0800 (PST) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id m0GAJd3i012173; Wed, 16 Jan 2008 10:19:39 +0000 (GMT) Date: Wed, 16 Jan 2008 11:19:39 +0100 From: Casper.Dik@sun.com Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <478DD74F.6070106@Sun.COM> Sender: casper@holland.sun.com To: Darren J Moffat Cc: Gary Winiger , PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Message-id: <200801161019.m0GAJd3i012173@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> <478DD74F.6070106@Sun.COM> Status: RO Content-Length: 350 >"Console User" is also used in other platforms for similar or near >identical functionality. This is an important point because it means >that people will more easily find this functionality on Solaris rather >than assuming it doesn't exist. I agreed; I thought we had already come to the cnclusion that this needed to be renamed? Casper From sacadmin Wed Jan 16 02:53:20 2008 Received: from dm-sfbay-02.sfbay.sun.com (dm-sfbay-02 [129.146.11.31]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GArJKS015226; Wed, 16 Jan 2008 02:53:19 -0800 (PST) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GArJoj054563; Wed, 16 Jan 2008 02:53:19 -0800 (PST) Received: from relay25.sun.com (relay21.sun.com [192.12.251.14] (may be forged)) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m0GAlAwv001691; Wed, 16 Jan 2008 10:53:19 GMT Received: from mms23es.sun.com ([150.143.232.54] [150.143.232.54]) by relay25i.sun.com with ESMTP id BT-MMP-490871; Wed, 16 Jan 2008 10:53:19 Z Received: from relay24.sun.com (relay24.sun.com [192.12.251.74]) by mms23es.sun.com with ESMTP id BT-MMP-628300; Wed, 16 Jan 2008 10:53:18 Z Received: from mailgwb1.fraunhofer.de ([153.96.87.18] [153.96.87.18]) by relay24i.sun.com with ESMTP id BT-MMP-1479717; Wed, 16 Jan 2008 10:53:18 Z Received: from mailgwb1.fraunhofer.de (localhost [127.0.0.1]) by mailgwb1.fraunhofer.de (8.13.5+/8.13.4) with ESMTP id m0GArGFE019520; Wed, 16 Jan 2008 11:53:17 +0100 (CET) Received: from pluto.fokus.fraunhofer.de (pluto.fokus.fraunhofer.de [195.37.77.164]) by mailgwb1.fraunhofer.de (8.13.5+/8.13.4) with ESMTP id m0GArGsY019483 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 16 Jan 2008 11:53:16 +0100 (CET) Received: from EXCHSRV.fokus.fraunhofer.de (bohr [10.147.9.231]) by pluto.fokus.fraunhofer.de (8.13.7/8.13.7) with SMTP id m0GArFP3004104; Wed, 16 Jan 2008 11:53:16 +0100 (MET) Received: from rigel ([10.147.65.195]) by EXCHSRV.fokus.fraunhofer.de with Microsoft SMTPSVC(6.0.3790.3959); Wed, 16 Jan 2008 11:53:16 +0100 Date: Wed, 16 Jan 2008 11:53:15 +0100 From: Joerg.Schilling@fokus.fraunhofer.de (Joerg Schilling) To: gww@sac.sfbay.sun.com, Darren.Moffat@sun.com Cc: Riny.Qian@sun.com, PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, lsarc@sac.sfbay.sun.com Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] Message-ID: <478de21b.xXUFOwOBY2WdNQfD%Joerg.Schilling@fokus.fraunhofer.de> References: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> <478DD74F.6070106@Sun.COM> In-Reply-To: <478DD74F.6070106@Sun.COM> User-Agent: nail 11.22 3/20/05 X-Brightmail-Tracker: AAAAAA== X-OriginalArrivalTime: 16 Jan 2008 10:53:16.0489 (UTC) FILETIME=[FF969390:01C8582D] X-Fraunhofer-Email-Policy: accepted X-Antispam: No, score=-2.6/5.0, scanned in 0.129sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Status: RO Content-Length: 1046 Darren J Moffat wrote: > The architecture I have no issues with. The terminology I have serious > issues with. > > "Workstation" could to some people imply a difference between laptop, > desktop, workstation, server. Best not to use that term since what > "type" of hardware the machine is or what "function" it servers isn't > relevant here. > > "Owner" is even worse it isn't the person that legally owns the system. This is a deficite of the English language ;-) In German we have Besitzer The person who currently has an object in his disposal (the name is drived from "to sit on something"). Eigentümer The person who legally owns an object Hope this helps for english people fo find a better term..... Jörg -- EMail:joerg@schily.isdn.cs.tu-berlin.de (home) Jörg Schilling D-13353 Berlin js@cs.tu-berlin.de (uni) schilling@fokus.fraunhofer.de (work) Blog: http://schily.blogspot.com/ URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily From sommerfeld@sun.com Wed Jan 16 10:41:29 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GIfSxq025010 for ; Wed, 16 Jan 2008 10:41:29 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GIfNip007116; Wed, 16 Jan 2008 18:41:27 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUR0010H2L10500@nwk-avmta-1.sfbay.Sun.COM>; Wed, 16 Jan 2008 10:41:25 -0800 (PST) Received: from dm-east-01.east.sun.com ([129.148.9.192]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUR00MJJ2L0Y500@nwk-avmta-1.sfbay.Sun.COM>; Wed, 16 Jan 2008 10:41:24 -0800 (PST) Received: from thunk.east.sun.com (thunk.East.Sun.COM [129.148.174.66]) by dm-east-01.east.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GIfK1K046736; Wed, 16 Jan 2008 13:41:20 -0500 (EST) Received: from [IPv6:::1] (localhost [IPv6:::1]) by thunk.east.sun.com (8.14.1+Sun/8.14.1) with ESMTP id m0GIfJt9015949; Wed, 16 Jan 2008 13:41:19 -0500 (EST) Date: Wed, 16 Jan 2008 13:41:18 -0500 From: Bill Sommerfeld Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <478DD74F.6070106@Sun.COM> To: Darren J Moffat Cc: Gary Winiger , psarc-ext@sun.com, Riny.Qian@sun.com, PSARC-record@sac.sfbay.sun.com, lsarc@sac.sfbay.sun.com Message-id: <1200508878.15306.27.camel@thunk> MIME-version: 1.0 X-Mailer: Evolution 2.12.1 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> <478DD74F.6070106@Sun.COM> Status: RO Content-Length: 226 On Wed, 2008-01-16 at 10:07 +0000, Darren J Moffat wrote: > The architecture I have no issues with. The terminology I have serious > issues with. I share Darren's concerns here. "Console User" seems like a better name. From gww@eng.sun.com Wed Jan 16 11:01:39 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GJ1cx9026776 for ; Wed, 16 Jan 2008 11:01:38 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GJ1Xen015002; Wed, 16 Jan 2008 19:01:37 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUR0022B3IPUE00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 16 Jan 2008 11:01:37 -0800 (PST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUR00MC63INYP20@nwk-avmta-1.sfbay.Sun.COM>; Wed, 16 Jan 2008 11:01:36 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GJ1XKT043002; Wed, 16 Jan 2008 11:01:33 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m0GJ0R9T003107; Wed, 16 Jan 2008 11:00:27 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m0GJ0Rox003106; Wed, 16 Jan 2008 11:00:27 -0800 (PST) Date: Wed, 16 Jan 2008 11:00:27 -0800 (PST) From: Gary Winiger Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] To: Darren.Moffat@sun.com, sommerfeld@sun.com Cc: gww@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, PSARC-record@sac.sfbay.sun.com, lsarc@sac.sfbay.sun.com Message-id: <200801161900.m0GJ0Rox003106@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 1033 > On Wed, 2008-01-16 at 10:07 +0000, Darren J Moffat wrote: > > The architecture I have no issues with. The terminology I have serious > > issues with. > > I share Darren's concerns here. "Console User" seems like a better > name. I'm out of the office (and mostly on holiday) til next Wed. I've not carefully gone over the comments on names, and possibly won't til I return. My point about "owner" was two fold: Legacy defines console-owner a user who owns the system console device node (and this meant stat("/dev/console") and look at st_uid. I don't have an issue not following legacy other than the next point. Second, the term "user" seems too generic in terms of adding Rights automatically. Particular in when Virtual Consoles is configured. I like Joerg's comment "besitzer" and haven't found a good English subsititute ;-) Workstation/Console controller/possessor doesn't seen to flow ;-( Gary.. From sommerfeld@sun.com Wed Jan 16 12:35:20 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GKZKtT001099 for ; Wed, 16 Jan 2008 12:35:20 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m0GKZJJJ064572; Wed, 16 Jan 2008 13:35:19 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUR000017UUX700@nwk-avmta-2.sfbay.sun.com>; Wed, 16 Jan 2008 12:35:18 -0800 (PST) Received: from dm-east-01.east.sun.com ([129.148.9.192]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUR00KF87UTK2D0@nwk-avmta-2.sfbay.sun.com>; Wed, 16 Jan 2008 12:35:17 -0800 (PST) Received: from thunk.east.sun.com (thunk.East.Sun.COM [129.148.174.66]) by dm-east-01.east.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GKZBQK011195; Wed, 16 Jan 2008 15:35:11 -0500 (EST) Received: from [IPv6:::1] (localhost [IPv6:::1]) by thunk.east.sun.com (8.14.1+Sun/8.14.1) with ESMTP id m0GKZBHa016307; Wed, 16 Jan 2008 15:35:11 -0500 (EST) Date: Wed, 16 Jan 2008 15:35:10 -0500 From: Bill Sommerfeld Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <200801161900.m0GJ0Rox003106@marduk.eng.sun.com> To: Gary Winiger Cc: Darren.Moffat@sun.com, gww@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, PSARC-record@sac.sfbay.sun.com, lsarc@sac.sfbay.sun.com Message-id: <1200515710.15306.72.camel@thunk> MIME-version: 1.0 X-Mailer: Evolution 2.12.1 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200801161900.m0GJ0Rox003106@marduk.eng.sun.com> Status: RO Content-Length: 460 On Wed, 2008-01-16 at 11:00 -0800, Gary Winiger wrote: > Second, the term "user" seems too generic in terms of adding > Rights automatically. Particular in when Virtual Consoles > is configured. I like Joerg's comment "besitzer" and haven't > found a good English subsititute ;-) I thought "Occupant" and then google found: http://thesaurus.reference.com/browse/Occupant which suggests among others: Occupant Resident Denizen - Bill From scott.rotondo@sun.com Wed Jan 16 13:47:51 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GLlo7s003879 for ; Wed, 16 Jan 2008 13:47:51 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m0GLleNB015297; Thu, 17 Jan 2008 05:47:49 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUR0040TB7L8000@nwk-avmta-2.sfbay.sun.com>; Wed, 16 Jan 2008 13:47:45 -0800 (PST) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUR003TBB7KCO00@nwk-avmta-2.sfbay.sun.com>; Wed, 16 Jan 2008 13:47:44 -0800 (PST) Received: from domus.sfbay.sun.com (domus.SFBay.Sun.COM [10.6.64.11]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GLlfwY023897; Wed, 16 Jan 2008 13:47:41 -0800 (PST) Received: from [129.146.108.62] (vinifera.SFBay.Sun.COM [129.146.108.62]) by domus.sfbay.sun.com (Trusted Solaris (8.11.7)/8.11.6) with ESMTP id m0GLlfE15035; Wed, 16 Jan 2008 13:47:41 -0800 (PST) Date: Wed, 16 Jan 2008 13:47:40 -0800 From: Scott Rotondo Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <1200515710.15306.72.camel@thunk> To: Bill Sommerfeld Cc: Gary Winiger , Darren.Moffat@sun.com, gww@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, PSARC-record@sac.sfbay.sun.com, lsarc@sac.sfbay.sun.com Message-id: <478E7B7C.6040703@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200801161900.m0GJ0Rox003106@marduk.eng.sun.com> <1200515710.15306.72.camel@thunk> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 588 Bill Sommerfeld wrote: > On Wed, 2008-01-16 at 11:00 -0800, Gary Winiger wrote: >> Second, the term "user" seems too generic in terms of adding >> Rights automatically. Particular in when Virtual Consoles >> is configured. I like Joerg's comment "besitzer" and haven't >> found a good English subsititute ;-) > > I thought "Occupant" and then google found: > > http://thesaurus.reference.com/browse/Occupant > > which suggests among others: > > Occupant > Resident > Denizen > > - Bill If not Owner, then perhaps Lessee Tenant Houseguest Squatter :-) Scott From scott.rotondo@sun.com Wed Jan 16 14:56:41 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0GMuejB007345 for ; Wed, 16 Jan 2008 14:56:41 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GMuUZP003824 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 16 Jan 2008 22:56:40 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUR00J0DEEE4I00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 16 Jan 2008 15:56:38 -0700 (MST) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUR00HJ9EEDOA10@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 16 Jan 2008 15:56:38 -0700 (MST) Received: from domus.sfbay.sun.com (domus.SFBay.Sun.COM [10.6.64.11]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0GMuYQD063730; Wed, 16 Jan 2008 14:56:34 -0800 (PST) Received: from [129.146.108.62] (vinifera.SFBay.Sun.COM [129.146.108.62]) by domus.sfbay.sun.com (Trusted Solaris (8.11.7)/8.11.6) with ESMTP id m0GMuXE15743; Wed, 16 Jan 2008 14:56:34 -0800 (PST) Date: Wed, 16 Jan 2008 14:56:33 -0800 From: Scott Rotondo Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <478de21b.xXUFOwOBY2WdNQfD%Joerg.Schilling@fokus.fraunhofer.de> To: Joerg Schilling Cc: gww@sac.sfbay.sun.com, Darren.Moffat@sun.com, Riny.Qian@sun.com, PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, lsarc@sac.sfbay.sun.com Message-id: <478E8BA1.3000307@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 8BIT X-PMX-Version: 5.2.0.264296 References: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> <478DD74F.6070106@Sun.COM> <478de21b.xXUFOwOBY2WdNQfD%Joerg.Schilling@fokus.fraunhofer.de> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 1097 Joerg Schilling wrote: > Darren J Moffat wrote: > >> The architecture I have no issues with. The terminology I have serious >> issues with. >> >> "Workstation" could to some people imply a difference between laptop, >> desktop, workstation, server. Best not to use that term since what >> "type" of hardware the machine is or what "function" it servers isn't >> relevant here. >> >> "Owner" is even worse it isn't the person that legally owns the system. > > This is a deficite of the English language ;-) > > In German we have > > Besitzer The person who currently has an object in his disposal > (the name is drived from "to sit on something"). > > Eigentümer The person who legally owns an object > > Hope this helps for english people fo find a better term..... > In English we have the legal term "tenant in possession" which sounds approximately equivalent to Besitzer, but it's not common in everyday speech. Actually, Console User seems fine to me. I don't think there is a problem with granting rights to someone who is "just" a user. Scott From sacadmin Wed Jan 16 19:15:52 2008 Received: from dm-sfbay-02.sfbay.sun.com (dm-sfbay-02 [129.146.11.31]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0H3FqRT020400; Wed, 16 Jan 2008 19:15:52 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0H3FpvV040003; Wed, 16 Jan 2008 19:15:51 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m0H3FjHc010965; Thu, 17 Jan 2008 03:15:45 GMT Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JUR00D01QDFEA00@mail-apac.sun.com> (original mail from Riny.Qian@Sun.COM) ; Thu, 17 Jan 2008 11:15:45 +0800 (SGT) Received: from [10.13.21.119] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JUR0076ZQE2W4G0@mail-apac.sun.com>; Thu, 17 Jan 2008 11:15:45 +0800 (SGT) Date: Thu, 17 Jan 2008 11:16:39 +0800 From: Riny Qian Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <200801161900.m0GJ0Rox003106@marduk.eng.sun.com> Sender: Riny.Qian@sun.com To: Gary Winiger Cc: Darren.Moffat@sun.com, sommerfeld@sun.com, gww@sac.sfbay.sun.com, psarc-ext@sun.com, PSARC-record@sac.sfbay.sun.com, lsarc@sac.sfbay.sun.com Message-id: <478EC897.2010308@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <200801161900.m0GJ0Rox003106@marduk.eng.sun.com> User-Agent: Thunderbird 2.0.0.0 (X11/20070618) Status: RO Content-Length: 1730 Gary Winiger wrote: >> On Wed, 2008-01-16 at 10:07 +0000, Darren J Moffat wrote: >>> The architecture I have no issues with. The terminology I have serious >>> issues with. >> I share Darren's concerns here. "Console User" seems like a better >> name. > > I'm out of the office (and mostly on holiday) til next Wed. > I've not carefully gone over the comments on names, and > possibly won't til I return. My point about "owner" was two > fold: > > Legacy defines > console-owner a user who owns the > system console device > node > (and this meant stat("/dev/console") and look > at st_uid. I don't have an issue not following legacy > other than the next point. > > Second, the term "user" seems too generic in terms of adding > Rights automatically. Particular in when Virtual Consoles > is configured. I like Joerg's comment "besitzer" and haven't > found a good English subsititute ;-) > Workstation/Console controller/possessor doesn't seen to flow ;-( > "Console User" seems to be a better term to me too in terms of virtual console, in which there can be multiple console users at the same time and this Infrastructure applies to them all, as we discussed in the pre-review. BTW, how about multiple users on multi-seat, which has been available on SPARC for a long time? And how about providing a library interface, something like is_console_user()? It could have a Committed level, though the implementation/definition may vary in different configurations? It would be also beneficial to other projects/cases, like this one, that expect to determine if a user is "Console User". Regards, Riny From sacadmin Wed Jan 16 22:33:01 2008 Received: from dm-sfbay-02.sfbay.sun.com (dm-sfbay-02 [129.146.11.31]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0H6X1JF022989; Wed, 16 Jan 2008 22:33:01 -0800 (PST) Received: from sca-es-mail-2.sun.com (sca-es-mail-2.Sun.COM [192.18.43.133]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0H6X0Nw032430; Wed, 16 Jan 2008 22:33:00 -0800 (PST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m0H6Wtl0000113; Wed, 16 Jan 2008 22:32:55 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JUR00501ZF6XF00@fe-sfbay-10.sun.com> (original mail from Glenn.Faden@Sun.COM); Wed, 16 Jan 2008 22:32:55 -0800 (PST) Received: from rampartgf.local ([71.202.95.125]) by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JUR00J6NZIUCBD0@fe-sfbay-10.sun.com>; Wed, 16 Jan 2008 22:32:55 -0800 (PST) Date: Wed, 16 Jan 2008 22:32:54 -0800 From: Glenn Faden Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-reply-to: <478E8BA1.3000307@sun.com> Sender: Glenn.Faden@sun.com To: Scott Rotondo Cc: Joerg Schilling , gww@sac.sfbay.sun.com, Darren.Moffat@sun.com, Riny.Qian@sun.com, PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, lsarc@sac.sfbay.sun.com Message-id: <478EF696.8010806@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 8BIT References: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> <478DD74F.6070106@Sun.COM> <478de21b.xXUFOwOBY2WdNQfD%Joerg.Schilling@fokus.fraunhofer.de> <478E8BA1.3000307@sun.com> User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031) Status: RO Content-Length: 1772 I think the term Workstation Owner dates back to our work on SunOS CMW. Even today in Trusted Extensions, we still have an X protocol request called XTsolSetWorkstationOwner(3XTSOL). This user is implicitly authorized to specify certain preferences like the Xhost policy. This term was invented before we had Sun Ray appliances, so today we might call it Appliance User. ;-) While it makes sense from a backward compatibility viewpoint not to rename this API, I agree with everyone else who prefers the term Console User when referring to the "individual who is in charge of the console". --Glenn Scott Rotondo wrote: > Joerg Schilling wrote: >> Darren J Moffat wrote: >> >>> The architecture I have no issues with. The terminology I have >>> serious issues with. >>> >>> "Workstation" could to some people imply a difference between >>> laptop, desktop, workstation, server. Best not to use that term >>> since what "type" of hardware the machine is or what "function" it >>> servers isn't relevant here. >>> >>> "Owner" is even worse it isn't the person that legally owns the system. >> >> This is a deficite of the English language ;-) >> >> In German we have >> Besitzer The person who currently has an object in his disposal >> (the name is drived from "to sit on something"). >> >> Eigentümer The person who legally owns an object >> >> Hope this helps for english people fo find a better term..... >> > > In English we have the legal term "tenant in possession" which sounds > approximately equivalent to Besitzer, but it's not common in everyday > speech. > > Actually, Console User seems fine to me. I don't think there is a > problem with granting rights to someone who is "just" a user. > > Scott > From darrenm@opensolaris.org Thu Jan 17 02:39:37 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0HAdbT3027547 for ; Thu, 17 Jan 2008 02:39:37 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m0HAdbOW007774 for <@sunmail2sca.sfbay.sun.com:PSARC-EXT@sun.com>; Thu, 17 Jan 2008 02:39:37 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUS00I05AY10900@nwk-avmta-2.sfbay.sun.com> for PSARC-EXT@sun.com (ORCPT PSARC-EXT@sun.com); Thu, 17 Jan 2008 02:39:37 -0800 (PST) Received: from gmp-eb-mail-2.sun.com ([192.18.6.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUS005LJAY03AA0@nwk-avmta-2.sfbay.sun.com> for PSARC-EXT@sun.com (ORCPT PSARC-EXT@sun.com); Thu, 17 Jan 2008 02:39:36 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe1.eu.sun.com [192.18.6.10]) by gmp-eb-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m0HAdZMA010223 for ; Thu, 17 Jan 2008 10:39:35 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JUS008017NU1900@fe-emea-09.sun.com> (original mail from darrenm@opensolaris.org) for PSARC-EXT@sun.com (ORCPT PSARC-EXT@sun.com); Thu, 17 Jan 2008 10:39:35 +0000 (GMT) Received: from [129.156.173.199] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JUS0091NAXVVL10@fe-emea-09.sun.com> for PSARC-EXT@sun.com (ORCPT PSARC-EXT@sun.com); Thu, 17 Jan 2008 10:39:31 +0000 (GMT) Date: Thu, 17 Jan 2008 10:39:31 +0000 From: Darren J Moffat Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 In-reply-to: <33501208.1200560085979.JavaMail.Twebapp@oss-app1> Sender: Darren.Moffat@sun.com To: "Richard L. Hamilton" Cc: PSARC-EXT@sun.com Message-id: <478F3063.9060200@opensolaris.org> Organization: OpenSolaris MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <33501208.1200560085979.JavaMail.Twebapp@oss-app1> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 947 I believe your concerns are already address by the fact that the additional capability that the user gains is done using RBAC profiles. It will be the subject of other cases what actions are actually provided in the default configuration. This case is just about the infrastructure. It will also be upto individual distributions what profiles they have configured that are assigned using this mechanism. Because this is done using RBAC the local admin gets to change or augment the default policy of the distribution. Most of the initial things that will use this mechanism are already granted to the user on the system console anyway - the ability to shutdown, suspend and provide WiFi keys. This case isn't about changing that but about providing a single place to control this for the developer and more importantly making it visible and under the RBAC umbrella for the admin. Hope that helps your concerns. -- Darren J Moffat From gww@eng.sun.com Sun Jan 20 15:12:10 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0KNCAcI003277 for ; Sun, 20 Jan 2008 15:12:10 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m0KNBqQp017186 for <@sunmail2sca.sfbay.sun.com:PSARC-EXT@sun.com>; Sun, 20 Jan 2008 15:12:09 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JUY00E05TS8BN00@brm-avmta-1.central.sun.com> for PSARC-EXT@sun.com (ORCPT PSARC-EXT@sun.com); Sun, 20 Jan 2008 16:12:08 -0700 (MST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JUY00960TS7EA80@brm-avmta-1.central.sun.com> for PSARC-EXT@sun.com (ORCPT PSARC-EXT@sun.com); Sun, 20 Jan 2008 16:12:07 -0700 (MST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0KNC7Sp009120; Sun, 20 Jan 2008 15:12:07 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m0KNAual010028; Sun, 20 Jan 2008 15:10:56 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m0KNAtGG010027; Sun, 20 Jan 2008 15:10:55 -0800 (PST) Date: Sun, 20 Jan 2008 15:10:55 -0800 (PST) From: Gary Winiger Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 To: rlhamil@smart.net, darrenm@opensolaris.org Cc: PSARC-EXT@sun.com Message-id: <200801202310.m0KNAtGG010027@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 443 > I believe your concerns are already address by the fact that the > additional capability that the user gains is done using RBAC profiles. Hummm, Richard's initial mail doesn't seem to have ever made it to the case log. > Hope that helps your concerns. Darren's comments are correct. This is the infrastructure that is populated by other cases to enable the "workstation owner" with Rights that other users might not have. Gary.. From sacadmin Sun Jan 27 20:26:19 2008 Received: from marduk.eng.sun.com (marduk [129.146.108.224]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0S4QJ8O000922 for ; Sun, 27 Jan 2008 20:26:19 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m0S4OxB8028340; Sun, 27 Jan 2008 20:24:59 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m0S4OxD7028339; Sun, 27 Jan 2008 20:24:59 -0800 (PST) Date: Sun, 27 Jan 2008 20:24:59 -0800 (PST) From: Gary Winiger Message-Id: <200801280424.m0S4OxD7028339@marduk.eng.sun.com> To: psarc-ext@sun.com Cc: Riny.Qian@sun.com, gww@eng.sun.com, lsarc@sac.sfbay.sun.com Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] Status: RO Content-Length: 1882 > It requests a Patch release binding and a Committed interface Taxonomy. > > Full diff marked man pages for policy.conf(4) and chkauthattr(3secdb) > are in the case directory. OK. It seems that no one vocal like workstation owner. In some sense I'd like to hear from members who have not spoken. Silence is usually acceptance, but I'm not sure of what. "Console", "console" seems to be preferred to "Workstation", "workstation", I'm happy with that change. My personal leaning is to "Owner", "owner" as the legacy term and what we call the "Subject identity" that controls objects. The other terms proposed (less "user") all seem less obvious, though I like "denizen" ;-). So I'll wait til 30 Jan to hear from members before making a final proposal at the PSARC meeting. Riny asks: > BTW, how about multiple users on multi-seat, which has been available > on SPARC for a long time? I'm not sure I understand the question. If it's in relationship to SunRay/SRSS, none of those users are the "owner" of /dev/console, so they will not be automatically granted the additional Rights Profiles enabled by this case. > And how about providing a library interface, something like > is_console_user()? It could have a Committed level, though the > implementation/definition may vary in different configurations? > It would be also beneficial to other projects/cases, like this one, > that expect to determine if a user is "Console User". I'd be happy to provide an interface named to align with the final specification of this case. However, I'd like to know what other projects would benefit and how it would be used. It seems to me the correct architectural interface is chkauthattr() for authorizations or getexecuser() for execution profiles. Both of these are covered by this case. So, I'm inclined to currently say no to this request. Gary.. From sacadmin Mon Jan 28 04:13:12 2008 Received: from phorcys.east.sun.com (phorcys.East.Sun.COM [129.148.174.143]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0SCDCWt008996 for ; Mon, 28 Jan 2008 04:13:12 -0800 (PST) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m0SCDBkR020214; Mon, 28 Jan 2008 07:13:11 -0500 (EST) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.2+Sun/8.14.2/Submit) id m0SCDApS020211; Mon, 28 Jan 2008 07:13:10 -0500 (EST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <18333.50902.677875.651639@gargle.gargle.HOWL> Date: Mon, 28 Jan 2008 07:13:10 -0500 From: James Carlson To: Gary Winiger Cc: psarc-ext@sun.com, Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] In-Reply-To: <200801280424.m0S4OxD7028339@marduk.eng.sun.com> References: <200801280424.m0S4OxD7028339@marduk.eng.sun.com> X-Mailer: VM 7.01 under Emacs 21.3.1 Status: RO Content-Length: 668 Gary Winiger writes: > > It requests a Patch release binding and a Committed interface Taxonomy. > > > > Full diff marked man pages for policy.conf(4) and chkauthattr(3secdb) > > are in the case directory. > > OK. It seems that no one vocal like workstation owner. > In some sense I'd like to hear from members who have not > spoken. Silence is usually acceptance, but I'm not sure I prefer "Console User." It's short and descriptive. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From sacadmin Mon Jan 28 06:26:25 2008 Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0SEQPOK011316 for ; Mon, 28 Jan 2008 06:26:25 -0800 (PST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m0SEQONS014484; Mon, 28 Jan 2008 08:26:24 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m0SEQOqx014483; Mon, 28 Jan 2008 08:26:24 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Mon, 28 Jan 2008 08:26:24 -0600 From: Nicolas Williams To: Gary Winiger Cc: PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] Message-ID: <20080128142624.GX12865@Sun.COM> Mail-Followup-To: Gary Winiger , PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@Sun.COM, lsarc@sac.eng.sun.com References: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200801160018.m0G0IXLm004793@sac.sfbay.sun.com> User-Agent: Mutt/1.5.7i Status: RO Content-Length: 1046 On Tue, Jan 15, 2008 at 04:18:33PM -0800, Gary Winiger wrote: > Note: the non "console-owner" configurations in /etc/default/sys-suspend, > "all, "-", "" are all covered by the existing RBAC infrastructure. > For "all", configure policy.conf(4) PROFS_GRANTED key to include the > "Workstation Owner" Rights Profile; > for "-" (none), comment out or remove the policy.conf(4) WORKSTATION_OWNER > key; > for "", configure user_attr(4) for the enumerated users to > include the "Workstation Owner" Rights Profile in their list of Rights Profiles. If WORKSTATION_OWNER=Workstation Owner (or CONSOLE_USER=...) will be added on upgrade then removing it manually cannot be a good way to express the legacy "-" from /etc/default/sys-suspend... The next upgrade would restore the default "console-owner" sys-suspend behaviour. Commenting it out may also not be such a good idea either -- would it complicate i.policyconf? Instead, allowing and recommending an empty value to disable the feature may be the way to go. Nico -- From sacadmin Mon Jan 28 08:40:19 2008 Received: from dm-eng-02.sfbay.sun.com (dm-eng-02 [129.146.11.32]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0SGeJP4013378; Mon, 28 Jan 2008 08:40:19 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0SGeIYn031694; Mon, 28 Jan 2008 08:40:18 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m0SGcxFC028827; Mon, 28 Jan 2008 08:38:59 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m0SGcxnd028826; Mon, 28 Jan 2008 08:38:59 -0800 (PST) Date: Mon, 28 Jan 2008 08:38:59 -0800 (PST) From: Gary Winiger Message-Id: <200801281638.m0SGcxnd028826@marduk.eng.sun.com> To: gww@sac.sfbay.sun.com, Nicolas.Williams@sun.com Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] Cc: PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com X-Sun-Charset: US-ASCII Status: RO Content-Length: 834 > > If WORKSTATION_OWNER=Workstation Owner (or CONSOLE_USER=...) will be > added on upgrade then removing it manually cannot be a good way to > express the legacy "-" from /etc/default/sys-suspend... The next > upgrade would restore the default "console-owner" sys-suspend behaviour. > > Commenting it out may also not be such a good idea either -- would it > complicate i.policyconf? The intent is that i.policyconf act to WORKSTATION_OWNER the same as it does with AUTHS_GRANTED and PROFS_GRANTED. If present or commented out, don't change. If absent add the default. > Instead, allowing and recommending an empty value to disable the feature > may be the way to go. Just as with AUTHS_GRANTED and PROFS_GRANTED, WORKSTATION_OWNER can contain an empty value. Gary.. P.S. If you'd like to code review or test ;-) ..... From sacadmin Mon Jan 28 09:42:56 2008 Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0SHguss015118; Mon, 28 Jan 2008 09:42:56 -0800 (PST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m0SHgtMr014619; Mon, 28 Jan 2008 11:42:55 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m0SHgtk5014618; Mon, 28 Jan 2008 11:42:55 -0600 (CST) X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Mon, 28 Jan 2008 11:42:55 -0600 From: Nicolas Williams To: Gary Winiger Cc: gww@sac.sfbay.sun.com, PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] Message-ID: <20080128174254.GA12865@Sun.COM> Mail-Followup-To: Gary Winiger , gww@sac.sfbay.sun.com, PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@Sun.COM, lsarc@sac.sfbay.sun.com References: <200801281638.m0SGcxnd028826@marduk.eng.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200801281638.m0SGcxnd028826@marduk.eng.sun.com> User-Agent: Mutt/1.5.7i Status: RO Content-Length: 1146 On Mon, Jan 28, 2008 at 08:38:59AM -0800, Gary Winiger wrote: > > If WORKSTATION_OWNER=Workstation Owner (or CONSOLE_USER=...) will be > > added on upgrade then removing it manually cannot be a good way to > > express the legacy "-" from /etc/default/sys-suspend... The next > > upgrade would restore the default "console-owner" sys-suspend behaviour. > > The intent is that i.policyconf act to WORKSTATION_OWNER the > same as it does with AUTHS_GRANTED and PROFS_GRANTED. > If present or commented out, don't change. If absent add the > default. > > > for "-" (none), comment out or remove the policy.conf(4) > > > WORKSTATION_OWNER key; The manpage doesn't say "remove" so I guess that's OK. Eventually there should be a case obsoleting /etc/default/sys-suspend, right? That manpage shouldn't say that "-" maps to "comment out _or remove_"... > > Instead, allowing and recommending an empty value to disable the feature > > may be the way to go. > > Just as with AUTHS_GRANTED and PROFS_GRANTED, WORKSTATION_OWNER > can contain an empty value. > > Gary.. > P.S. If you'd like to code review or test ;-) ..... I'll code review. From glenn.skinner@sun.com Mon Jan 28 10:33:23 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0SIXM3B016627 for ; Mon, 28 Jan 2008 10:33:22 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m0SIXHis026424; Tue, 29 Jan 2008 02:33:21 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JVD00I01A7H4K00@brm-avmta-1.central.sun.com>; Mon, 28 Jan 2008 11:33:17 -0700 (MST) Received: from ivrel.sfbay.sun.com ([129.146.74.76]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JVD00EWPA7H7IB0@brm-avmta-1.central.sun.com>; Mon, 28 Jan 2008 11:33:17 -0700 (MST) Received: from ivrel (ivrel [129.146.74.76]) by ivrel.sfbay.sun.com (8.13.8+Sun/8.13.8) with SMTP id m0SIXGJT028030; Mon, 28 Jan 2008 10:33:16 -0800 (PST) Date: Mon, 28 Jan 2008 10:33:16 -0800 (PST) From: Glenn Skinner Subject: Re: 2008/034 [Defining Workstation Owner Infrastructure] To: psarc-ext@sun.com Cc: Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Reply-to: Glenn Skinner Message-id: <200801281833.m0SIXGJT028030@ivrel.sfbay.sun.com> MIME-version: 1.0 X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.6_36 SunOS 5.11 sun4u sparc Content-type: TEXT/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-MD5: HRkpdkKPElOc/8Rt8hYs8w== X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 536 Date: Mon, 28 Jan 2008 07:13:10 -0500 From: James Carlson Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] Gary Winiger writes: > OK. It seems that no one vocal like workstation owner. > In some sense I'd like to hear from members who have not > spoken. Silence is usually acceptance, but I'm not sure I prefer "Console User." It's short and descriptive. I'm happy with Jim's suggested terminology. -- Glenn From gww@eng.sun.com Mon Jan 28 11:29:34 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0SJTXFQ018838 for ; Mon, 28 Jan 2008 11:29:34 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0SJTM8x020128 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Mon, 28 Jan 2008 19:29:32 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JVD00A0VCT7XF00@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Mon, 28 Jan 2008 11:29:31 -0800 (PST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JVD008FGCT5M110@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Mon, 28 Jan 2008 11:29:30 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0SJTRRT008568; Mon, 28 Jan 2008 11:29:27 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m0SJS8jL029088; Mon, 28 Jan 2008 11:28:08 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m0SJS8pu029087; Mon, 28 Jan 2008 11:28:08 -0800 (PST) Date: Mon, 28 Jan 2008 11:28:08 -0800 (PST) From: Gary Winiger Subject: Re: Defining Workstation Owner Infrastructure [PSARC/2008/034 FastTrack timeout 01/23/2008] To: gww@eng.sun.com, Nicolas.Williams@sun.com Cc: gww@sac.sfbay.sun.com, PSARC-record@sac.sfbay.sun.com, psarc-ext@sun.com, Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Message-id: <200801281928.m0SJS8pu029087@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 463 > > > > for "-" (none), comment out or remove the policy.conf(4) > > > > WORKSTATION_OWNER key; > > The manpage doesn't say "remove" so I guess that's OK. Eventually there > should be a case obsoleting /etc/default/sys-suspend, right? That > manpage shouldn't say that "-" maps to "comment out _or remove_"... OK, my spec was sloppy. Comment out of remove the profile list. Yes, Randyf is planning a case that I referred to in the PSARC GPM case. Gary.. From sacadmin Mon Jan 28 22:39:16 2008 Received: from dm-eng-02.sfbay.sun.com (dm-eng-02 [129.146.11.32]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0T6dGpv006260 for ; Mon, 28 Jan 2008 22:39:16 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0T6dGCW035145; Mon, 28 Jan 2008 22:39:16 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m0T6buN0000465; Mon, 28 Jan 2008 22:37:56 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m0T6btWc000464; Mon, 28 Jan 2008 22:37:55 -0800 (PST) Date: Mon, 28 Jan 2008 22:37:55 -0800 (PST) From: Gary Winiger Message-Id: <200801290637.m0T6btWc000464@marduk.eng.sun.com> To: glenn.skinner@sun.com, psarc-ext@sun.com Cc: Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Subject: Re: 2008/034 [Defining Workstation Owner Infrastructure] Status: RO Content-Length: 293 > I prefer "Console User." It's short and descriptive. > > I'm happy with Jim's suggested terminology. OK, Console User it is. I've updated the materials and put them in final.spec. I've kept the original materials in original.spec. Thanks for all your considered input. Gary.. From gww@eng.sun.com Wed Jan 30 12:04:12 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m0UK4BF9016646 for ; Wed, 30 Jan 2008 12:04:12 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0UK3wqG013121 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 30 Jan 2008 20:04:10 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JVH0060H3QY9V00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 30 Jan 2008 13:04:10 -0700 (MST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JVH005Y73QWI050@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 30 Jan 2008 13:04:08 -0700 (MST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m0UK462P035686; Wed, 30 Jan 2008 12:04:06 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m0UK2i8r004422; Wed, 30 Jan 2008 12:02:44 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m0UK2iAv004421; Wed, 30 Jan 2008 12:02:44 -0800 (PST) Date: Wed, 30 Jan 2008 12:02:44 -0800 (PST) From: Gary Winiger Subject: Re: 2008/034 [Defining Workstation Owner Infrastructure] To: glenn.skinner@sun.com, gww@eng.sun.com, psarc-ext@sun.com Cc: Riny.Qian@sun.com, lsarc@sac.sfbay.sun.com Message-id: <200801302002.m0UK2iAv004421@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 133 > OK, Console User it is. I've updated the materials and put This case was approved as updated at today's PSARC meeting. Gary..