From Sebastien.Roy@sun.com Tue Feb 26 10:26:19 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1QIQJ3o008960
	for <psarc-ext@sac.sfbay.sun.com>; Tue, 26 Feb 2008 10:26:19 -0800 (PST)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1QIQJsg012186
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Tue, 26 Feb 2008 11:26:19 -0700 (MST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWU00801Z7UAW00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Tue, 26 Feb 2008 11:26:18 -0700 (MST)
Received: from brmea-mail-1.sun.com ([192.18.98.31])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWU0043LZ7RUQ50@brm-avmta-1.central.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Tue,
 26 Feb 2008 11:26:16 -0700 (MST)
Received: from fe-amer-10.sun.com ([192.18.109.80])
	by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1QIQFM6026035	for
 <psarc-ext@sun.com>; Tue, 26 Feb 2008 18:26:15 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWU00101Z4OIX00@mail-amer.sun.com>
 (original mail from Sebastien.Roy@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Tue,
 26 Feb 2008 11:26:15 -0700 (MST)
Received: from [129.148.174.103] by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0JWU00BFJZ7RI730@mail-amer.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Tue, 26 Feb 2008 11:26:15 -0700 (MST)
Date: Tue, 26 Feb 2008 13:26:15 -0500
From: Sebastien Roy <Sebastien.Roy@sun.com>
Subject: 2008/152 dlmgmtd uid and door file location
Sender: Sebastien.Roy@sun.com
To: psarc-ext@sun.com
Message-id: <47C459C7.6000606@sun.com>
Organization: Sun Microsystems
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
User-Agent: Thunderbird 2.0.0.9 (X11/20080115)
Status: RO
Content-Length: 3555

I'm sponsoring this case for Cathy Zhou.  I've marked the case closed 
approved automatic, as the interfaces being modified are private, and the 
changes are minor and fairly obvious.


1 Introduction
==============

     This case proposes two changes related to the dlmgmtd daemon:

     1) Change the dlmgmtd daemon to be run by the "dladm" user.

     2) Create a /etc/svc/volatile/dladm directory and change the
        dlmgmtd door file location from /etc/.dlmgmt_door to
        /etc/svc/volatile/dladm/dlmgmt_door.  Remove the
        /etc/.dlmgmt_door file from the SUNWcsr package.

2. Details
==========

  - Privileges for dlmgmtd

     As part of PSARC/2008/002, we already limit privileges of the
     dlmgmtd daemon to be only "file_dac_write, file_chown_self,
     sys_mount, and sys_net_config", but since dlmgmtd is still run by
     uid 0, it is still vulnerable as it still has unnecessary
     privileges (e.g., read access to all root owned files).

     We propose to change the dlmgmtd daemon to be run by the "dladm"
     user.  Note that the "dladm" user already exists and owns the
     files under /etc/dladm. The dlmgmtd daemon needs to access the
     files under /etc/dladm, so it is natural to run dlmgmtd by
     "dladm".

     A /etc/svc/volatile/dladm directory will be created and will be
     owned by "dladm". This directory will be used to hold the
     temporary datalink configuration files and the dlmgmtd door file
     (discussed below).

     Note that although the /var/run directory seems a better place to
     hold door files, it is mounted much later in boot by the
     filesystem/minimal service, therefore cannot be used in this case.

  - Door file for dlmgmtd

     As part of PSARC/2006/299, we proposed the dlmgmtd daemon to
     communicate with datalink management interfaces consumers using a
     door located in /etc (/etc/.dlmgmt_door). Because the dlmgmtd
     daemon is started very early in boot, we chose to make the
     /etc/.dlmgmt_door file part of the SUNWcsr package, to avoid
     having to create the door file before the root FS becomes
     writable.

     Several issues were found related to the above implementation
     though:

     1) Missing /etc/.dlmgmt_door file after flashinstall

        In the case of flashinstall, the flarcreate's "fdo" command
        excludes all the door files because "archiver (cpio/pax) unable
        to archive DOOR and SOCKET files, and it gives error". As a
        result, the /etc/.dlmgmt_door file is excluded by flarcreate
        and hence will not exist on the system after flashinstall. This
        causes the failure of the network/datalink-management service
        (which starts dlmgmtd) and an unusable system.

     2) After system is booted, "pkgchk -n SUNWcsr" reports error

        Because a file is never packaged as a door, the
        /etc/.dlmgmt_door file is packaged as part of SUNWcsr (file
        type 'f'), and only becomes a door by dlmgmtd calls fattach()
        on it at runtime. But this causes pkgchk to report an error:

            # pkgchk -n SUNWcsr
            ERROR: /etc/.dlmgmt_door
                file type <f> expected <D> actual

      To resolve the above two issues, we propose to change the dlmgmtd
      door file location from /etc/.dlmgmt_door to
      /etc/svc/volatile/dladm/dlmgmt_door.  Because /etc/svc/volatile
      is mounted as tmpfs, there is no problem with having dlmgmtd
      create the door file early in boot, and the /etc/.dlmgmt_door
      file is no longer needed.

From carlsonj@phorcys.east.sun.com Tue Feb 26 12:23:01 2008
Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1QKN1lI013283
	for <psarc-ext@sac.sfbay.sun.com>; Tue, 26 Feb 2008 12:23:01 -0800 (PST)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1QKMx19011425;
	Tue, 26 Feb 2008 12:23:00 -0800 (PST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWV00H034MBB100@brm-avmta-1.central.sun.com>; Tue,
 26 Feb 2008 13:22:59 -0700 (MST)
Received: from phorcys.east.sun.com ([129.148.174.143])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWV00H5T4M94P00@brm-avmta-1.central.sun.com>; Tue,
 26 Feb 2008 13:22:58 -0700 (MST)
Received: from phorcys.east.sun.com (localhost [127.0.0.1])
	by phorcys.east.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1QKMvwl026515; Tue,
 26 Feb 2008 15:22:57 -0500 (EST)
Received: (from carlsonj@localhost)
	by phorcys.east.sun.com (8.14.2+Sun/8.14.2/Submit) id m1QKMvMx026512; Tue,
 26 Feb 2008 15:22:57 -0500 (EST)
Date: Tue, 26 Feb 2008 15:22:57 -0500
From: James Carlson <james.d.carlson@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C459C7.6000606@sun.com>
To: Sebastien Roy <Sebastien.Roy@sun.com>
Cc: psarc-ext@sun.com
Message-id: <18372.29985.655971.885827@gargle.gargle.HOWL>
MIME-version: 1.0
X-Mailer: VM 7.01 under Emacs 21.3.1
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com>
Status: RO
Content-Length: 1080

Sebastien Roy writes:
> I'm sponsoring this case for Cathy Zhou.  I've marked the case closed 
> approved automatic, as the interfaces being modified are private, and the 
> changes are minor and fairly obvious.

Release binding Minor?

>      2) After system is booted, "pkgchk -n SUNWcsr" reports error
> 
>         Because a file is never packaged as a door, the
>         /etc/.dlmgmt_door file is packaged as part of SUNWcsr (file
>         type 'f'), and only becomes a door by dlmgmtd calls fattach()
>         on it at runtime. But this causes pkgchk to report an error:
> 
>             # pkgchk -n SUNWcsr
>             ERROR: /etc/.dlmgmt_door
>                 file type <f> expected <D> actual

If there isn't one already, I'd suggest filing a bug on that.  That
result makes no sense at all -- "D" isn't even one of the prototype(4)
options.

-- 
James Carlson, Solaris Networking              <james.d.carlson@sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677

From Sebastien.Roy@sun.com Tue Feb 26 13:03:26 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1QL3QPT014331
	for <psarc-ext@sac.sfbay.sun.com>; Tue, 26 Feb 2008 13:03:26 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1QL3Na6055208
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Tue, 26 Feb 2008 14:03:26 -0700 (MST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWV0036P6HOMC00@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Tue, 26 Feb 2008 13:03:24 -0800 (PST)
Received: from brmea-mail-2.sun.com ([192.18.98.43])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWV000E26HLVL50@nwk-avmta-2.sfbay.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Tue,
 26 Feb 2008 13:03:21 -0800 (PST)
Received: from fe-amer-10.sun.com ([192.18.109.80])
	by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1QL3L9G008645	for
 <psarc-ext@sun.com>; Tue, 26 Feb 2008 21:03:21 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWV00H015UH2G00@mail-amer.sun.com>
 (original mail from Sebastien.Roy@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Tue,
 26 Feb 2008 14:03:21 -0700 (MST)
Received: from [129.148.174.103] by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0JWV00L7F6H78J00@mail-amer.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Tue, 26 Feb 2008 14:03:07 -0700 (MST)
Date: Tue, 26 Feb 2008 16:03:07 -0500
From: Sebastien Roy <Sebastien.Roy@sun.com>
Subject: Re: [clearview-discuss] 2008/152 dlmgmtd uid and door file location
In-reply-to: <18372.29985.655971.885827@gargle.gargle.HOWL>
Sender: Sebastien.Roy@sun.com
To: James Carlson <James.D.Carlson@sun.com>
Cc: psarc-ext@sun.com
Message-id: <47C47E8B.7040100@sun.com>
Organization: Sun Microsystems
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com>
 <18372.29985.655971.885827@gargle.gargle.HOWL>
User-Agent: Thunderbird 2.0.0.9 (X11/20080115)
Status: RO
Content-Length: 1112

James Carlson wrote:
> 
> Release binding Minor?

If, for some reason, a Minor release were to be cut today without this 
case being included in it, then implementing this case in a patch of that 
release (patching the bits delivered in 2006/499 which this case 
modifies) would be acceptable.  The interfaces being modified are Project 
Private and the modifications are compatible in nature.  Therefore, Patch 
binding is more appropriate.

>>      2) After system is booted, "pkgchk -n SUNWcsr" reports error
>>
>>         Because a file is never packaged as a door, the
>>         /etc/.dlmgmt_door file is packaged as part of SUNWcsr (file
>>         type 'f'), and only becomes a door by dlmgmtd calls fattach()
>>         on it at runtime. But this causes pkgchk to report an error:
>>
>>             # pkgchk -n SUNWcsr
>>             ERROR: /etc/.dlmgmt_door
>>                 file type <f> expected <D> actual
> 
> If there isn't one already, I'd suggest filing a bug on that.  That
> result makes no sense at all -- "D" isn't even one of the prototype(4)
> options.

One will be filed.

Thanks,
-Seb

From Darren.Moffat@sun.com Wed Feb 27 02:41:51 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RAfpTk007560
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 02:41:51 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RAfokd049799
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 27 Feb 2008 03:41:50 -0700 (MST)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00C018DQVX00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 02:41:50 -0800 (PST)
Received: from gmp-eb-mail-2.sun.com ([192.18.6.24])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW0003A8DP2U70@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 02:41:50 -0800 (PST)
Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11])
	by gmp-eb-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1RAfnwG001480	for
 <psarc-ext@sun.com>; Wed, 27 Feb 2008 10:41:49 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWW003017JUGE00@fe-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 10:41:49 +0000 (GMT)
Received: from [129.156.173.199] by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0JWW0060O8DKHH10@fe-emea-09.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 10:41:44 +0000 (GMT)
Date: Wed, 27 Feb 2008 10:41:43 +0000
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C459C7.6000606@sun.com>
Sender: Darren.Moffat@sun.com
To: Sebastien Roy <Sebastien.Roy@sun.com>
Cc: psarc-ext@sun.com
Message-id: <47C53E67.2040008@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080116)
Status: RO
Content-Length: 1602

Sebastien Roy wrote:
> I'm sponsoring this case for Cathy Zhou.  I've marked the case closed 
> approved automatic, as the interfaces being modified are private, and 
> the changes are minor and fairly obvious.
> 
> 
> 1 Introduction
> ==============
> 
>     This case proposes two changes related to the dlmgmtd daemon:
> 
>     1) Change the dlmgmtd daemon to be run by the "dladm" user.
> 
>     2) Create a /etc/svc/volatile/dladm directory and change the
>        dlmgmtd door file location from /etc/.dlmgmt_door to
>        /etc/svc/volatile/dladm/dlmgmt_door.  Remove the
>        /etc/.dlmgmt_door file from the SUNWcsr package.

Doing this means that dlmgmtd will need to start up with all privileges 
so that it can write to /etc/svc/volatile to create the dladm subdir, it 
can then drop the privileges what it doesn't need.  However this 
complicates the cleanup of the door file on exit.  [I've been through 
this with kcfd because it has a similar issue].

Unless there is a real need for this to be on tmpfs I would recommend 
putting the door file in /etc/dladm/ since that is already owned and 
writtable by the dladm user.  This should mean that dlmgmtd could be 
started by SMF as the dladm user with only the privs it needs.   Note 
that I'm not suggesting the door file be packaged - it shouldn't be it 
is a Project Private communication channel.

As a side note I've looked at the current privilege code for dlmgtd and 
it needs a little work as it isn't safe for extensions to the basic set 
- contact me or Casper offline for what needs to be done here.

-- 
Darren J Moffat

From Cathy.Zhou@sun.com Wed Feb 27 03:29:46 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RBTjZZ008098
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 03:29:46 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RBTgLo018264
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 27 Feb 2008 11:29:44 GMT
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00H13ALHXL00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 03:29:41 -0800 (PST)
Received: from sineb-mail-2.sun.com ([192.18.19.7])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW0008OALF2X80@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 03:29:40 -0800 (PST)
Received: from fe-apac-06.sun.com
 (fe-apac-06.sun.com [192.18.19.177] (may be forged))
	by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1RBTrTM007251	for
 <psarc-ext@sun.com>; Wed, 27 Feb 2008 11:29:53 +0000 (GMT)
Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 id <0JWW00K01AL0AI00@mail-apac.sun.com>
 (original mail from Cathy.Zhou@Sun.COM) for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 19:29:39 +0800 (SGT)
Received: from [129.158.219.34] by mail-apac.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 with ESMTPSA id <0JWW00BTKALAMNN5@mail-apac.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 19:29:38 +0800 (SGT)
Date: Wed, 27 Feb 2008 19:29:34 +0800
From: Cathy Zhou <Cathy.Zhou@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C53E67.2040008@Sun.COM>
Sender: Cathy.Zhou@sun.com
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: Sebastien Roy <Sebastien.Roy@sun.com>, psarc-ext@sun.com
Message-id: <47C5499E.608@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
User-Agent: Thunderbird 1.5.0.2 (X11/20060427)
Status: RO
Content-Length: 2306

Darren J Moffat wrote:
> Sebastien Roy wrote:
>> I'm sponsoring this case for Cathy Zhou.  I've marked the case closed 
>> approved automatic, as the interfaces being modified are private, and 
>> the changes are minor and fairly obvious.
>>
>>
>> 1 Introduction
>> ==============
>>
>>     This case proposes two changes related to the dlmgmtd daemon:
>>
>>     1) Change the dlmgmtd daemon to be run by the "dladm" user.
>>
>>     2) Create a /etc/svc/volatile/dladm directory and change the
>>        dlmgmtd door file location from /etc/.dlmgmt_door to
>>        /etc/svc/volatile/dladm/dlmgmt_door.  Remove the
>>        /etc/.dlmgmt_door file from the SUNWcsr package.
> 
> Doing this means that dlmgmtd will need to start up with all privileges 
> so that it can write to /etc/svc/volatile to create the dladm subdir, it 
> can then drop the privileges what it doesn't need.  However this 
> complicates the cleanup of the door file on exit.  [I've been through 
> this with kcfd because it has a similar issue].
> 
dlmgmtd started with all privileges and create the "dladm" subdir, it then drops 
priviledges and setuid to dladm. Only after that, the door file is created and converted 
to a door file by fattach().

The cleanup only does fdetach(). It does not and (there is no need to) delete the "dladm" 
subdir.

> Unless there is a real need for this to be on tmpfs I would recommend 
> putting the door file in /etc/dladm/ since that is already owned and 
> writtable by the dladm user.  This should mean that dlmgmtd could be 
> started by SMF as the dladm user with only the privs it needs.   

Aside from the door related operation, the dlmgmtd daemon needs to open the dld control 
node when it starts, which also needs root privileges.

> Note 
> that I'm not suggesting the door file be packaged - it shouldn't be it 
> is a Project Private communication channel.
> 
It it is not packaged, then there is the problem that we are not be able to create the 
door file under /etc/dladm because dlmgmtd starts before the root FS becomes read-write.

> As a side note I've looked at the current privilege code for dlmgtd and 
> it needs a little work as it isn't safe for extensions to the basic set 
> - contact me or Casper offline for what needs to be done here.

Will do.

Thanks
- Cathy

From bart.smaalders@sun.com Wed Feb 27 09:32:29 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RHWTF4019379
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 09:32:29 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RHWPTj043583;
	Wed, 27 Feb 2008 10:32:25 -0700 (MST)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00707RDYFQ00@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 09:32:22 -0800 (PST)
Received: from zion.sfbay.sun.com ([129.146.17.75])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW0012KRDXQO70@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 09:32:21 -0800 (PST)
Received: from [129.146.228.109] (cyber.SFBay.Sun.COM [129.146.228.109])
	by zion.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1RHWLCU291569; Wed,
 27 Feb 2008 17:32:21 +0000 (GMT)
Date: Wed, 27 Feb 2008 09:37:21 -0800
From: Bart Smaalders <bart.smaalders@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C5499E.608@sun.com>
To: Cathy Zhou <Cathy.Zhou@sun.com>
Cc: Darren J Moffat <Darren.Moffat@sun.com>,
        Sebastien Roy <Sebastien.Roy@sun.com>, psarc-ext@sun.com
Message-id: <47C59FD1.3050001@Sun.COM>
Organization: Sun Microsystems
MIME-version: 1.0
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080201)
Status: RO
Content-Length: 1385

Cathy Zhou wrote:

>> Note that I'm not suggesting the door file be packaged - it shouldn't 
>> be it is a Project Private communication channel.
>>
> It it is not packaged, then there is the problem that we are not be able 
> to create the door file under /etc/dladm because dlmgmtd starts before 
> the root FS becomes read-write.

You end up packaging an empty type f file; the namefs door mount happens
on top of that... so Darren is right, the _door_ isn't package; the file 
that is packaged
is what is the door mounts on top of w/ fattach.

According to the fattach man page (and common sense), the file will need 
to be
writable by the dlmgmtd process:

      int fattach(int fildes, const char *path);


DESCRIPTION
      The fattach() function attaches a  STREAMS-  or  doors-based
      file  descriptor to an object in the file system name space,
      effectively associating a name with fildes. The fildes argu-
      ment  must  be  a  valid open file descriptor representing a
      STREAMS or doors file. The path argument is a path  name  of
      an  existing  object  and  the  user  must  have appropriate
      privileges or be the owner of the file and have  write  per-
      missions.

- Bart


-- 
Bart Smaalders			Solaris Kernel Performance
barts@cyber.eng.sun.com		http://blogs.sun.com/barts
"You will contribute more with mercurial than with thunderbird."

From meem@triplex.east.sun.com Wed Feb 27 10:02:00 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RI1xLu021892
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 10:01:59 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RI1qlW011035;
	Wed, 27 Feb 2008 18:01:54 GMT
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00D0LSR5UY00@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 10:01:53 -0800 (PST)
Received: from triplex.East.Sun.COM ([129.148.174.104])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW0080BSR3UJ80@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 10:01:52 -0800 (PST)
Received: from triplex.East.Sun.COM (localhost [127.0.0.1])
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2) with ESMTP id m1RI1pDc017108; Wed,
 27 Feb 2008 13:01:51 -0500 (EST)
Received: (from meem@localhost)
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2/Submit) id m1RI1prt017105; Wed,
 27 Feb 2008 13:01:51 -0500 (EST)
Date: Wed, 27 Feb 2008 13:01:51 -0500
From: Peter Memishian <peter.memishian@sun.com>
Subject: Re: [clearview-discuss] 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C59FD1.3050001@Sun.COM>
To: Bart Smaalders <bart.smaalders@sun.com>
Cc: Cathy Zhou <Cathy.Zhou@sun.com>, psarc-ext@sun.com,
        Sebastien Roy <Sebastien.Roy@sun.com>,
        Darren J Moffat <Darren.Moffat@sun.com>
Message-id: <18373.42383.582478.330230@gargle.gargle.HOWL>
MIME-version: 1.0
X-Mailer: VM 7.19 under 21.4 (patch 21) "Educational Television" XEmacs Lucid
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM>
Status: RO
Content-Length: 178


 > You end up packaging an empty type f file

That's what we do right now, but it causes problems, hence this fasttrack.
See the original fasttrack email for details.

-- 
meem

From Cathy.Zhou@sun.com Wed Feb 27 10:04:39 2008
Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RI4cpR022169
	for <psarc-ext@sac.sfbay.Sun.COM>; Wed, 27 Feb 2008 10:04:39 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1RI4TNs020205;
	Thu, 28 Feb 2008 02:04:36 +0800 (SGT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00A0DSVLIH00@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 10:04:33 -0800 (PST)
Received: from sineb-mail-1.sun.com ([192.18.19.6])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW001B4SVJQLC0@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 10:04:32 -0800 (PST)
Received: from fe-apac-01.sun.com
 (fe-apac-01.sun.com [192.18.19.172] (may be forged))
	by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1RI4bnt014775; Wed,
 27 Feb 2008 18:04:37 +0000 (GMT)
Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 id <0JWW00G01RRLGS00@mail-apac.sun.com>
 (original mail from Cathy.Zhou@Sun.COM); Thu, 28 Feb 2008 02:04:31 +0800 (SGT)
Received: from [129.158.219.34] by mail-apac.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 with ESMTPSA id <0JWW00878SVGFBS1@mail-apac.sun.com>; Thu,
 28 Feb 2008 02:04:31 +0800 (SGT)
Date: Thu, 28 Feb 2008 02:04:28 +0800
From: Cathy Zhou <Cathy.Zhou@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C59FD1.3050001@Sun.COM>
Sender: Cathy.Zhou@sun.com
To: Bart Smaalders <bart.smaalders@sun.com>
Cc: Darren J Moffat <Darren.Moffat@sun.com>,
        Sebastien Roy <Sebastien.Roy@sun.com>, psarc-ext@sun.com
Message-id: <47C5A62C.1000009@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM>
User-Agent: Thunderbird 1.5.0.2 (X11/20060427)
Status: RO
Content-Length: 1659

Bart Smaalders wrote:
> Cathy Zhou wrote:
> 
>>> Note that I'm not suggesting the door file be packaged - it shouldn't 
>>> be it is a Project Private communication channel.
>>>
>> It it is not packaged, then there is the problem that we are not be 
>> able to create the door file under /etc/dladm because dlmgmtd starts 
>> before the root FS becomes read-write.
> 
> You end up packaging an empty type f file; the namefs door mount happens
> on top of that... 

That is what we current have, except that the door file is currently in /etc 
(/etc/.dlmgmt_door) instead of /etc/dladm, but it caused flashinstall problem described in 
this case.

> so Darren is right, the _door_ isn't package; the file 
> that is packaged
> is what is the door mounts on top of w/ fattach.
> 
> According to the fattach man page (and common sense), the file will need 
> to be
> writable by the dlmgmtd process:
> 
>      int fattach(int fildes, const char *path);
> 
> 
> DESCRIPTION
>      The fattach() function attaches a  STREAMS-  or  doors-based
>      file  descriptor to an object in the file system name space,
>      effectively associating a name with fildes. The fildes argu-
>      ment  must  be  a  valid open file descriptor representing a
>      STREAMS or doors file. The path argument is a path  name  of
>      an  existing  object  and  the  user  must  have appropriate
>      privileges or be the owner of the file and have  write  per-
>      missions.
> 
Hmm, that is different from my experience. If that is true, this is another reason we have 
to have the door file located in /etc/svc/volatile/dladm (as proposed in this case).

Thanks
- Cathy

From casper@holland.sun.com Wed Feb 27 11:01:02 2008
Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJ12k5027285
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:01:02 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RJ0wkF010940
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@Sun.COM>; Wed, 27 Feb 2008 11:01:02 -0800 (PST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00F49VHPYK00@nwk-avmta-2.sfbay.sun.com> for psarc-ext@Sun.COM
 (ORCPT psarc-ext@Sun.COM); Wed, 27 Feb 2008 11:01:01 -0800 (PST)
Received: from dm-holland-02.uk.sun.com ([129.156.101.225])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00802VHNUOC0@nwk-avmta-2.sfbay.sun.com> for
 psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Wed,
 27 Feb 2008 11:01:00 -0800 (PST)
Received: from holland (room101.Holland.Sun.COM [10.16.117.40])
	by dm-holland-02.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2)
 with ESMTP id m1RJ0r0i007018; Wed, 27 Feb 2008 19:00:54 +0000 (GMT)
Date: Wed, 27 Feb 2008 20:00:53 +0100
From: Casper.Dik@sun.com
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C5A62C.1000009@sun.com>
Sender: casper@holland.sun.com
To: Cathy Zhou <Cathy.Zhou@sun.com>
Cc: Bart Smaalders <bart.smaalders@sun.com>,
        Darren J Moffat <Darren.Moffat@sun.com>,
        Sebastien Roy <Sebastien.Roy@sun.com>, psarc-ext@sun.com
Message-id: <200802271900.m1RJ0r0i007018@dm-holland-02.uk.sun.com>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM> <47C5A62C.1000009@sun.com>
Status: RO
Content-Length: 255


>That is what we current have, except that the door file is currently in /etc 
>(/etc/.dlmgmt_door) instead of /etc/dladm, but it caused flashinstall problem described in 
>this case.
>

Why was it made into a hidden file?  Why not in /var/run?

Casper


From bart.smaalders@sun.com Wed Feb 27 11:04:04 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJ44rt027374
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:04:04 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RJ3sjr006277;
	Wed, 27 Feb 2008 12:03:59 -0700 (MST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00G57VMLCD00@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 11:03:57 -0800 (PST)
Received: from zion.sfbay.sun.com ([129.146.17.75])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW008MLVMIUSC0@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 11:03:55 -0800 (PST)
Received: from [129.146.228.109] (cyber.SFBay.Sun.COM [129.146.228.109])
	by zion.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1RJ3stu294944; Wed,
 27 Feb 2008 19:03:54 +0000 (GMT)
Date: Wed, 27 Feb 2008 11:08:52 -0800
From: Bart Smaalders <bart.smaalders@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <200802271900.m1RJ0r0i007018@dm-holland-02.uk.sun.com>
To: Casper.Dik@sun.com
Cc: Cathy Zhou <Cathy.Zhou@sun.com>, Darren J Moffat <Darren.Moffat@sun.com>,
        Sebastien Roy <Sebastien.Roy@sun.com>, psarc-ext@sun.com
Message-id: <47C5B544.4030501@Sun.COM>
Organization: Sun Microsystems
MIME-version: 1.0
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM> <47C5A62C.1000009@sun.com>
 <200802271900.m1RJ0r0i007018@dm-holland-02.uk.sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080201)
Status: RO
Content-Length: 805

Casper.Dik@Sun.COM wrote:
>> That is what we current have, except that the door file is currently in /etc 
>> (/etc/.dlmgmt_door) instead of /etc/dladm, but it caused flashinstall problem described in 
>> this case.
>>
> 
> Why was it made into a hidden file?  Why not in /var/run?
> 
> Casper
> 

According to the original mail:


 >      Note that although the /var/run directory seems a better place to
 >      hold door files, it is mounted much later in boot by the
 >      filesystem/minimal service, therefore cannot be used in this case.


It seems to me that we're working around a lot of problems here in
other areas....

- Bart

-- 
Bart Smaalders			Solaris Kernel Performance
barts@cyber.eng.sun.com		http://blogs.sun.com/barts
"You will contribute more with mercurial than with thunderbird."

From casper@holland.sun.com Wed Feb 27 11:07:00 2008
Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJ70ah027425
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:07:00 -0800 (PST)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RJ70Ab012784
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 27 Feb 2008 11:07:00 -0800 (PST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00A03VRNIR00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 12:06:59 -0700 (MST)
Received: from dm-holland-02.uk.sun.com ([129.156.101.225])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00MEBVRMQBC0@brm-avmta-1.central.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 12:06:59 -0700 (MST)
Received: from holland (room101.Holland.Sun.COM [10.16.117.40])
	by dm-holland-02.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2)
 with ESMTP id m1RJ6s8u008290; Wed, 27 Feb 2008 19:06:54 +0000 (GMT)
Date: Wed, 27 Feb 2008 20:06:54 +0100
From: Casper.Dik@sun.com
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C5B544.4030501@Sun.COM>
Sender: casper@holland.sun.com
To: Bart Smaalders <bart.smaalders@sun.com>
Cc: Cathy Zhou <Cathy.Zhou@sun.com>, Darren J Moffat <Darren.Moffat@sun.com>,
        Sebastien Roy <Sebastien.Roy@sun.com>, psarc-ext@sun.com
Message-id: <200802271906.m1RJ6s8u008290@dm-holland-02.uk.sun.com>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM> <47C5A62C.1000009@sun.com>
 <200802271900.m1RJ0r0i007018@dm-holland-02.uk.sun.com>
 <47C5B544.4030501@Sun.COM>
Status: RO
Content-Length: 822


>Casper.Dik@Sun.COM wrote:
>>> That is what we current have, except that the door file is currently in /etc 
>>> (/etc/.dlmgmt_door) instead of /etc/dladm, but it caused flashinstall problem described in 
>>> this case.
>>>
>> 
>> Why was it made into a hidden file?  Why not in /var/run?
>> 
>> Casper
>> 
>
>According to the original mail:
>
>
> >      Note that although the /var/run directory seems a better place to
> >      hold door files, it is mounted much later in boot by the
> >      filesystem/minimal service, therefore cannot be used in this case.
>
>
>It seems to me that we're working around a lot of problems here in
>other areas....

I guess that in hindsight /var/run was not such a cool location after all;
/var/run needs to be created *after* /var is mounted and that might be
fairly late.

Casper


From Darren.Moffat@sun.com Wed Feb 27 11:10:58 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJAvqc027444
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:10:57 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RJAsFn009997;
	Wed, 27 Feb 2008 19:10:55 GMT
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00H0BVY32N00@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 11:10:51 -0800 (PST)
Received: from gmp-eb-mail-2.sun.com ([192.18.6.24])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00C1SVXYRZ20@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 11:10:47 -0800 (PST)
Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe1.eu.sun.com [192.18.6.10])
	by gmp-eb-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1RJAkE7001961;
 Wed, 27 Feb 2008 19:10:46 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWW00J01VWRY400@fe-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM); Wed,
 27 Feb 2008 19:10:46 +0000 (GMT)
Received: from [129.156.173.199] by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0JWW006P3VXRHH20@fe-emea-09.sun.com>; Wed,
 27 Feb 2008 19:10:40 +0000 (GMT)
Date: Wed, 27 Feb 2008 19:10:39 +0000
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: [clearview-discuss] 2008/152 dlmgmtd uid and door file location
In-reply-to: <18373.42383.582478.330230@gargle.gargle.HOWL>
Sender: Darren.Moffat@sun.com
To: Peter Memishian <Peter.Memishian@sun.com>
Cc: Bart Smaalders <bart.smaalders@sun.com>, Cathy Zhou <Cathy.Zhou@sun.com>,
        psarc-ext@sun.com, Sebastien Roy <Sebastien.Roy@sun.com>
Message-id: <47C5B5AF.30504@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM>
 <18373.42383.582478.330230@gargle.gargle.HOWL>
User-Agent: Thunderbird 2.0.0.9 (X11/20080116)
Status: RO
Content-Length: 751

Peter Memishian wrote:
>  > You end up packaging an empty type f file
> 
> That's what we do right now, but it causes problems, hence this fasttrack.
> See the original fasttrack email for details.

I actually agree with NOT packaging the file that is fattached() to, 
nscd, kcfd, syseventd, syslogd, picld, don't do that so I don't think 
dlmgmtd should either.

My suggestion of using /etc/dladm/ was to avoid the need to start as 
root merely to create /var/run/dladm as a dir owned by the dladm user. 
Cathy has pointed out though that dlmgmtd needs to start as root for 
other reasons though.  Given that I think /var/run is a better place 
than /etc/dladm/ and since it is in /var/run it shouldn't (nay can't) be 
packaged.

-- 
Darren J Moffat

From meem@triplex.east.sun.com Wed Feb 27 11:13:14 2008
Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJDERG027602
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:13:14 -0800 (PST)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RJD6OV014620;
	Wed, 27 Feb 2008 11:13:09 -0800 (PST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00A0PW1XV500@brm-avmta-1.central.sun.com>; Wed,
 27 Feb 2008 12:13:09 -0700 (MST)
Received: from triplex.East.Sun.COM ([129.148.174.104])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00MGCW1WQDD0@brm-avmta-1.central.sun.com>; Wed,
 27 Feb 2008 12:13:08 -0700 (MST)
Received: from triplex.East.Sun.COM (localhost [127.0.0.1])
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2) with ESMTP id m1RJD8O3017289; Wed,
 27 Feb 2008 14:13:08 -0500 (EST)
Received: (from meem@localhost)
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2/Submit) id m1RJD8a5017286; Wed,
 27 Feb 2008 14:13:08 -0500 (EST)
Date: Wed, 27 Feb 2008 14:13:08 -0500
From: Peter Memishian <Peter.Memishian@sun.com>
Subject: Re: [clearview-discuss] 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C5B5AF.30504@Sun.COM>
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: Peter Memishian <Peter.Memishian@sun.com>,
        Bart Smaalders <bart.smaalders@sun.com>,
        Cathy Zhou <Cathy.Zhou@sun.com>, psarc-ext@sun.com,
        Sebastien Roy <Sebastien.Roy@sun.com>
Message-id: <18373.46660.74697.949883@gargle.gargle.HOWL>
MIME-version: 1.0
X-Mailer: VM 7.19 under 21.4 (patch 21) "Educational Television" XEmacs Lucid
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM>
 <18373.42383.582478.330230@gargle.gargle.HOWL> <47C5B5AF.30504@Sun.COM>
Status: RO
Content-Length: 498


 > My suggestion of using /etc/dladm/ was to avoid the need to start as 
 > root merely to create /var/run/dladm as a dir owned by the dladm user. 
 > Cathy has pointed out though that dlmgmtd needs to start as root for 
 > other reasons though.  Given that I think /var/run is a better place 
 > than /etc/dladm/ and since it is in /var/run it shouldn't (nay can't) be 
 > packaged.

As covered in the original fasttrack write-up, /var/run cannot be used
because it's mounted too late.

-- 
meem

From johnz@domus.sfbay.sun.com Wed Feb 27 11:39:47 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJdkfa028135
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:39:46 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RJdG6N022409
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 27 Feb 2008 19:39:45 GMT
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00H05XA8JT00@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 11:39:45 -0800 (PST)
Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00834XA7UJF0@nwk-avmta-2.sfbay.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 11:39:44 -0800 (PST)
Received: from domus.sfbay.sun.com (domus.SFBay.Sun.COM [10.6.64.11])
	by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2)
 with ESMTP id m1RJddWu028351; Wed, 27 Feb 2008 11:39:39 -0800 (PST)
Received: (from johnz@localhost)
	by domus.sfbay.sun.com (Trusted Solaris (8.11.7)/8.11.6) id m1RJddN15381; Wed,
 27 Feb 2008 11:39:39 -0800 (PST)
Date: Wed, 27 Feb 2008 11:39:39 -0800 (PST)
From: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
To: bart.smaalders@sun.com, Casper.Dik@sun.com
Cc: Cathy.Zhou@sun.com, Darren.Moffat@sun.com, Sebastien.Roy@sun.com,
        psarc-ext@sun.com
Message-id: <200802271939.m1RJddN15381@domus.sfbay.sun.com>
Content-transfer-encoding: 7BIT
X-Sun-Charset: US-ASCII
X-PMX-Version: 5.2.0.264296
Status: RO
Content-Length: 980


> >Casper.Dik@Sun.COM wrote:
> >>> That is what we current have, except that the door file is currently in /etc 
> >>> (/etc/.dlmgmt_door) instead of /etc/dladm, but it caused flashinstall problem described in 
> >>> this case.
> >>>
> >> 
> >> Why was it made into a hidden file?  Why not in /var/run?
> >> 
> >> Casper
> >> 
> >
> >According to the original mail:
> >
> >
> > >      Note that although the /var/run directory seems a better place to
> > >      hold door files, it is mounted much later in boot by the
> > >      filesystem/minimal service, therefore cannot be used in this case.
> >
> >
> >It seems to me that we're working around a lot of problems here in
> >other areas....
> 
> I guess that in hindsight /var/run was not such a cool location after all;
> /var/run needs to be created *after* /var is mounted and that might be
> fairly late.
> 
> Casper

nfs services use a number of files in /etc/svc/volatile.
Couldn't dlmgmtd use that directory?

					-JZ

From Sebastien.Roy@sun.com Wed Feb 27 11:42:34 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJgXB7028173
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:42:33 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RJgUhY023854;
	Wed, 27 Feb 2008 19:42:30 GMT
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00K11XEU1Q00@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 11:42:30 -0800 (PST)
Received: from brmea-mail-2.sun.com ([192.18.98.43])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00CQKXETS630@nwk-avmta-1.sfbay.Sun.COM>; Wed,
 27 Feb 2008 11:42:29 -0800 (PST)
Received: from fe-amer-10.sun.com ([192.18.109.80])
	by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1RJgSQ4022553; Wed,
 27 Feb 2008 19:42:28 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWW00A01UGS9A00@mail-amer.sun.com>
 (original mail from Sebastien.Roy@Sun.COM); Wed,
 27 Feb 2008 12:42:28 -0700 (MST)
Received: from [192.168.1.4] ([71.174.191.147])
 by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28
 2007)) with ESMTPSA id <0JWW00LCLXEQ69C0@mail-amer.sun.com>; Wed,
 27 Feb 2008 12:42:27 -0700 (MST)
Date: Wed, 27 Feb 2008 14:42:26 -0500
From: Sebastien Roy <Sebastien.Roy@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <200802271939.m1RJddN15381@domus.sfbay.sun.com>
Sender: Sebastien.Roy@sun.com
To: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>
Cc: bart.smaalders@sun.com, Casper.Dik@sun.com, Cathy.Zhou@sun.com,
        Darren.Moffat@sun.com, psarc-ext@sun.com
Message-id: <47C5BD22.9060908@sun.com>
Organization: Sun Microsystems
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <200802271939.m1RJddN15381@domus.sfbay.sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080128)
Status: RO
Content-Length: 219

John Zolnowsky x69422/408-404-5064 wrote:
> nfs services use a number of files in /etc/svc/volatile.
> Couldn't dlmgmtd use that directory?

Your question is answered in the case materials as originally submitted.
-Seb

From Darren.Moffat@sun.com Wed Feb 27 11:51:33 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJpW84028281
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:51:33 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RJpVMe022266;
	Wed, 27 Feb 2008 12:51:32 -0700 (MST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00I09XTW5200@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 11:51:32 -0800 (PST)
Received: from gmp-eb-mail-2.sun.com ([192.18.6.24])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00HIYXTULB00@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 11:51:31 -0800 (PST)
Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe1.eu.sun.com [192.18.6.10])
	by gmp-eb-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1RJpU1Z003422;
 Wed, 27 Feb 2008 19:51:30 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWW00N01XPY1Y00@fe-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM); Wed,
 27 Feb 2008 19:51:30 +0000 (GMT)
Received: from [129.156.173.199] by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0JWW006QUXTTHH20@fe-emea-09.sun.com>; Wed,
 27 Feb 2008 19:51:29 +0000 (GMT)
Date: Wed, 27 Feb 2008 19:51:29 +0000
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <200802271939.m1RJddN15381@domus.sfbay.sun.com>
Sender: Darren.Moffat@sun.com
To: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>
Cc: bart.smaalders@sun.com, Casper.Dik@sun.com, Cathy.Zhou@sun.com,
        Sebastien.Roy@sun.com, psarc-ext@sun.com
Message-id: <47C5BF41.8090209@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <200802271939.m1RJddN15381@domus.sfbay.sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080116)
Status: RO
Content-Length: 239

John Zolnowsky x69422/408-404-5064 wrote:
> nfs services use a number of files in /etc/svc/volatile.
> Couldn't dlmgmtd use that directory?

That is actually what the original proposal the project team submitted said.

-- 
Darren J Moffat

From meem@triplex.east.sun.com Wed Feb 27 11:53:02 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJr1RY028318
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:53:01 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RJqoGk027556;
	Wed, 27 Feb 2008 19:52:54 GMT
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00I01XW46I00@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 11:52:52 -0800 (PST)
Received: from triplex.East.Sun.COM ([129.148.174.104])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00HAUXW3LA00@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 11:52:52 -0800 (PST)
Received: from triplex.East.Sun.COM (localhost [127.0.0.1])
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2) with ESMTP id m1RJqp7w017696; Wed,
 27 Feb 2008 14:52:51 -0500 (EST)
Received: (from meem@localhost)
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2/Submit) id m1RJqpG4017693; Wed,
 27 Feb 2008 14:52:51 -0500 (EST)
Date: Wed, 27 Feb 2008 14:52:51 -0500
From: Peter Memishian <peter.memishian@sun.com>
Subject: Re: [clearview-discuss] 2008/152 dlmgmtd uid and door file location
In-reply-to: <200802271939.m1RJddN15381@domus.sfbay.sun.com>
To: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>
Cc: bart.smaalders@sun.com, Casper.Dik@sun.com, psarc-ext@sun.com,
        cathy.zhou@sun.com, sebastien.roy@sun.com, Darren.Moffat@sun.com
Message-id: <18373.49043.455185.395497@gargle.gargle.HOWL>
MIME-version: 1.0
X-Mailer: VM 7.19 under 21.4 (patch 21) "Educational Television" XEmacs Lucid
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <200802271939.m1RJddN15381@domus.sfbay.sun.com>
Status: RO
Content-Length: 220


 > nfs services use a number of files in /etc/svc/volatile.
 > Couldn't dlmgmtd use that directory?

We are proposing to use that directory, but we're carving out a
subdirectory to keep things more organized.

-- 
meem

From meem@triplex.east.sun.com Wed Feb 27 11:54:06 2008
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RJs6Ev028546
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 11:54:06 -0800 (PST)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RJs0I6018308;
	Wed, 27 Feb 2008 11:54:00 -0800 (PST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00D05XY0YG00@brm-avmta-1.central.sun.com>; Wed,
 27 Feb 2008 12:54:00 -0700 (MST)
Received: from triplex.East.Sun.COM ([129.148.174.104])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00CYUXXZWW00@brm-avmta-1.central.sun.com>; Wed,
 27 Feb 2008 12:53:59 -0700 (MST)
Received: from triplex.East.Sun.COM (localhost [127.0.0.1])
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2) with ESMTP id m1RJrx1N017717; Wed,
 27 Feb 2008 14:53:59 -0500 (EST)
Received: (from meem@localhost)
	by triplex.East.Sun.COM (8.14.2+Sun/8.14.2/Submit) id m1RJrxW4017714; Wed,
 27 Feb 2008 14:53:59 -0500 (EST)
Date: Wed, 27 Feb 2008 14:53:59 -0500
From: Peter Memishian <peter.memishian@sun.com>
Subject: Re: [clearview-discuss] 2008/152 dlmgmtd uid and door file location
In-reply-to: <200802271900.m1RJ0r0i007018@dm-holland-02.uk.sun.com>
To: Casper.Dik@sun.com
Cc: Cathy Zhou <Cathy.Zhou@sun.com>, Sebastien Roy <Sebastien.Roy@sun.com>,
        Bart Smaalders <bart.smaalders@sun.com>, psarc-ext@sun.com,
        Darren J Moffat <Darren.Moffat@sun.com>
Message-id: <18373.49111.359935.846097@gargle.gargle.HOWL>
MIME-version: 1.0
X-Mailer: VM 7.19 under 21.4 (patch 21) "Educational Television" XEmacs Lucid
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com> <47C53E67.2040008@Sun.COM>
 <47C5499E.608@sun.com> <47C59FD1.3050001@Sun.COM> <47C5A62C.1000009@sun.com>
 <200802271900.m1RJ0r0i007018@dm-holland-02.uk.sun.com>
Status: RO
Content-Length: 175


 > Why was it made into a hidden file?

We just followed the existing convention with /etc/.syslog_door, which I
think was done to keep grep from tripping over it.

-- 
meem

From johnz@domus.sfbay.sun.com Wed Feb 27 12:18:55 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RKIsOu000345
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 12:18:54 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RKIfDK008248
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 27 Feb 2008 20:18:53 GMT
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00J09Z3E6000@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 12:18:50 -0800 (PST)
Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00HRAZ3DKZ20@nwk-avmta-2.sfbay.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 12:18:49 -0800 (PST)
Received: from domus.sfbay.sun.com (domus.SFBay.Sun.COM [10.6.64.11])
	by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2)
 with ESMTP id m1RKIiC1059134; Wed, 27 Feb 2008 12:18:44 -0800 (PST)
Received: (from johnz@localhost)
	by domus.sfbay.sun.com (Trusted Solaris (8.11.7)/8.11.6) id m1RKIiG15861; Wed,
 27 Feb 2008 12:18:44 -0800 (PST)
Date: Wed, 27 Feb 2008 12:18:44 -0800 (PST)
From: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
To: John.Zolnowsky@sun.com, Darren.Moffat@sun.com
Cc: bart.smaalders@sun.com, Casper.Dik@sun.com, Cathy.Zhou@sun.com,
        Sebastien.Roy@sun.com, psarc-ext@sun.com
Message-id: <200802272018.m1RKIiG15861@domus.sfbay.sun.com>
Content-transfer-encoding: 7BIT
X-Sun-Charset: US-ASCII
X-PMX-Version: 5.2.0.264296
Status: RO
Content-Length: 507


> John Zolnowsky x69422/408-404-5064 wrote:
> > nfs services use a number of files in /etc/svc/volatile.
> > Couldn't dlmgmtd use that directory?
> 
> That is actually what the original proposal the project team submitted said.

Oh ...

Couldn't the privileges issue be addressed through the use of a
separate preliminary transient service to create the
/etc/svc/volatile/dlmgmt directory?  The preliminary service could
even serve a number of services to be run with limited privileges and IDs.

					-JZ

From Sebastien.Roy@sun.com Wed Feb 27 12:31:31 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RKVUWr000895
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 12:31:31 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RKVQan013820;
	Wed, 27 Feb 2008 20:31:28 GMT
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWW00J09ZOFO700@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 12:31:27 -0800 (PST)
Received: from brmea-mail-4.sun.com ([192.18.98.36])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWW00HUXZODLD20@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 12:31:26 -0800 (PST)
Received: from fe-amer-10.sun.com ([192.18.109.80])
	by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1RKVPJD010605; Wed,
 27 Feb 2008 20:31:25 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWW00301XYHPX00@mail-amer.sun.com>
 (original mail from Sebastien.Roy@Sun.COM); Wed,
 27 Feb 2008 13:31:25 -0700 (MST)
Received: from [192.168.1.4] ([71.174.191.147])
 by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28
 2007)) with ESMTPSA id <0JWW00IQYZO2XLA0@mail-amer.sun.com>; Wed,
 27 Feb 2008 13:31:15 -0700 (MST)
Date: Wed, 27 Feb 2008 15:31:09 -0500
From: Sebastien Roy <Sebastien.Roy@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <200802272018.m1RKIiG15861@domus.sfbay.sun.com>
Sender: Sebastien.Roy@sun.com
To: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>
Cc: Darren.Moffat@sun.com, bart.smaalders@sun.com, Casper.Dik@sun.com,
        Cathy.Zhou@sun.com, psarc-ext@sun.com
Message-id: <47C5C88D.80705@sun.com>
Organization: Sun Microsystems
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <200802272018.m1RKIiG15861@domus.sfbay.sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080128)
Status: RO
Content-Length: 846

John Zolnowsky x69422/408-404-5064 wrote:
>> John Zolnowsky x69422/408-404-5064 wrote:
>>> nfs services use a number of files in /etc/svc/volatile.
>>> Couldn't dlmgmtd use that directory?
>> That is actually what the original proposal the project team submitted said.
> 
> Oh ...
> 
> Couldn't the privileges issue be addressed through the use of a
> separate preliminary transient service to create the
> /etc/svc/volatile/dlmgmt directory?  The preliminary service could
> even serve a number of services to be run with limited privileges and IDs.

It sounds like you're designing something of greater scope than this 
case.  Is there a reason for me to set a timer on this case and upgrade 
it to a fast-track?  I'm having a difficult time distinguishing between 
actual comments on the case and folks having side-band conversations...

-Seb

From Sebastien.Roy@sun.com Wed Feb 27 13:12:35 2008
Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RLCZ0V001752
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 13:12:35 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RLCYgH017016
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 27 Feb 2008 13:12:34 -0800 (PST)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWX005011KYPW00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 27 Feb 2008 13:12:34 -0800 (PST)
Received: from brmea-mail-1.sun.com ([192.18.98.31])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWX00C6A1KYS680@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 13:12:34 -0800 (PST)
Received: from fe-amer-09.sun.com ([192.18.109.79])
	by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1RLCY0N015849	for
 <psarc-ext@sun.com>; Wed, 27 Feb 2008 21:12:34 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JWX004010B7KK00@mail-amer.sun.com>
 (original mail from Sebastien.Roy@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 27 Feb 2008 14:12:34 -0700 (MST)
Received: from [192.168.1.4] ([71.174.191.147])
 by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28
 2007)) with ESMTPSA id <0JWX002FN1KRIU30@mail-amer.sun.com>; Wed,
 27 Feb 2008 14:12:28 -0700 (MST)
Date: Wed, 27 Feb 2008 16:12:27 -0500
From: Sebastien Roy <Sebastien.Roy@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C5C88D.80705@sun.com>
Sender: Sebastien.Roy@sun.com
To: Sebastien Roy <Sebastien.Roy@sun.com>
Cc: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>,
        psarc-ext@sun.com, Cathy.Zhou@sun.com, Casper.Dik@sun.com
Message-id: <47C5D23B.9040801@sun.com>
Organization: Sun Microsystems
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <200802272018.m1RKIiG15861@domus.sfbay.sun.com>
 <47C5C88D.80705@sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080128)
Status: RO
Content-Length: 156

FYI, I'm upgrading this case to a fast-track and setting the timer for 
March 5th in order for the privilege-related discussion to be fully digested.

-Seb

From Cathy.Zhou@sun.com Wed Feb 27 20:28:02 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S4S2Xf019727
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 27 Feb 2008 20:28:02 -0800 (PST)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S4S1fV015491;
	Wed, 27 Feb 2008 21:28:01 -0700 (MST)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JWX00I07LQMSA00@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 20:27:58 -0800 (PST)
Received: from sineb-mail-1.sun.com ([192.18.19.6])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JWX006V2LQLLG90@nwk-avmta-2.sfbay.sun.com>; Wed,
 27 Feb 2008 20:27:58 -0800 (PST)
Received: from fe-apac-02.sun.com
 (fe-apac-02.sun.com [192.18.19.173] (may be forged))
	by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1S4S22D007772; Thu,
 28 Feb 2008 04:28:02 +0000 (GMT)
Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 id <0JWX00401KMPV000@mail-apac.sun.com>
 (original mail from Cathy.Zhou@Sun.COM); Thu, 28 Feb 2008 12:27:56 +0800 (SGT)
Received: from [129.158.219.34] by mail-apac.sun.com
 (Sun Java System Messaging Server 6.2-6.01 (built Apr  3 2006))
 with ESMTPSA id <0JWX00IU8LQGP7R1@mail-apac.sun.com>; Thu,
 28 Feb 2008 12:27:56 +0800 (SGT)
Date: Thu, 28 Feb 2008 12:27:51 +0800
From: Cathy Zhou <Cathy.Zhou@sun.com>
Subject: Re: [clearview-discuss] 2008/152 dlmgmtd uid and door file location
In-reply-to: <200802272018.m1RKIiG15861@domus.sfbay.sun.com>
Sender: Cathy.Zhou@sun.com
To: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky@sun.com>
Cc: Darren.Moffat@sun.com, Sebastien.Roy@sun.com, bart.smaalders@sun.com,
        psarc-ext@sun.com, Casper.Dik@sun.com
Message-id: <47C63847.9020206@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <200802272018.m1RKIiG15861@domus.sfbay.sun.com>
User-Agent: Thunderbird 1.5.0.2 (X11/20060427)
Status: RO
Content-Length: 954

John Zolnowsky x69422/408-404-5064 wrote:
>> John Zolnowsky x69422/408-404-5064 wrote:
>>> nfs services use a number of files in /etc/svc/volatile.
>>> Couldn't dlmgmtd use that directory?
>> That is actually what the original proposal the project team submitted said.
> 
> Oh ...
> 
> Couldn't the privileges issue be addressed through the use of a
> separate preliminary transient service to create the
> /etc/svc/volatile/dlmgmt directory?  The preliminary service could
> even serve a number of services to be run with limited privileges and IDs.
> 
Like I mentioned to Darren: for this particular case, root privileges are needed not only 
for creating the dladm subdirectory and the door file, but also for opening the dld 
control node. dlmgmtd must finish all those operation before it seteuid to "dladm".

Thanks
- Cathy

> 					-JZ
> 
> 
> _________________________________
> clearview-discuss mailing list
> clearview-discuss@opensolaris.org


From Sebastien.Roy@sun.com Thu Mar  6 18:30:35 2008
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m272UZax018153
	for <psarc-ext@sac.sfbay.sun.com>; Thu, 6 Mar 2008 18:30:35 -0800 (PST)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m272UYZI011286
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Thu, 6 Mar 2008 18:30:35 -0800 (PST)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0JXC005019MYWF00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Thu, 06 Mar 2008 18:30:34 -0800 (PST)
Received: from brmea-mail-3.sun.com ([192.18.98.34])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0JXC000PY9MXT3C0@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu,
 06 Mar 2008 18:30:33 -0800 (PST)
Received: from fe-amer-09.sun.com ([192.18.109.79])
	by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m272UXE3015464	for
 <psarc-ext@sun.com>; Fri, 07 Mar 2008 02:30:33 +0000 (GMT)
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0JXC006019IO1Y00@mail-amer.sun.com>
 (original mail from Sebastien.Roy@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu,
 06 Mar 2008 19:30:33 -0700 (MST)
Received: from [192.168.1.4] ([71.174.191.147])
 by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28
 2007)) with ESMTPSA id <0JXC00MBC9MW4A30@mail-amer.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu,
 06 Mar 2008 19:30:32 -0700 (MST)
Date: Thu, 06 Mar 2008 21:30:31 -0500
From: Sebastien Roy <Sebastien.Roy@sun.com>
Subject: Re: 2008/152 dlmgmtd uid and door file location
In-reply-to: <47C459C7.6000606@sun.com>
Sender: Sebastien.Roy@sun.com
To: PSARC-ext@sun.com
Message-id: <47D0A8C7.8010705@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.2.0.264296
References: <47C459C7.6000606@sun.com>
User-Agent: Thunderbird 2.0.0.9 (X11/20080128)
Status: RO
Content-Length: 62

This case was approved during yesterday's PSARC meeting.
-Seb

