From sacadmin Thu May 15 09:43:46 2008
Received: from sac.sfbay.sun.com (localhost [127.0.0.1])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4FGhkt8018181;
	Thu, 15 May 2008 09:43:46 -0700 (PDT)
Received: (from dr161460@localhost)
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id m4FGhjEf018177;
	Thu, 15 May 2008 09:43:45 -0700 (PDT)
Date: Thu, 15 May 2008 09:43:45 -0700 (PDT)
From: Dean Roehrich <dr161460@sac.sfbay.sun.com>
Message-Id: <200805151643.m4FGhjEf018177@sac.sfbay.sun.com>
To: PSARC-record@sac.sfbay.sun.com
Subject: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack timeout 05/22/2008]
Status: RO
Content-Length: 571


Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI
This information is Copyright 2008 Sun Microsystems
1. Introduction
    1.1. Project/Component Working Name:
	 SAM-QFS SMF Management of sam-fsd
    1.2. Name of Document Author/Supplier:
	 Author:  Roman Saucedo
    1.3  Date of This Document:
	15 May, 2008
4. Technical Description
    See the case directory for more detail

6. Resources and Schedule
    6.4. Steering Committee requested information
   	6.4.1. Consolidation C-team Name:
		unknown
    6.5. ARC review type: FastTrack
    6.6. ARC Exposure: open


From roehrich@kickball-mn.Central.Sun.COM Thu May 15 09:58:59 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4FGwwlY018749
	for <psarc-ext@sac.sfbay.sun.com>; Thu, 15 May 2008 09:58:59 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m4FGwwRQ028990
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Thu, 15 May 2008 10:58:58 -0600 (MDT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K0X002035U8ZF00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Thu, 15 May 2008 09:58:56 -0700 (PDT)
Received: from dm-central-02.central.sun.com ([129.147.62.5])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K0X001CU5U8QJ60@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu,
 15 May 2008 09:58:56 -0700 (PDT)
Received: from kickball-mn.Central.Sun.COM
 (kickball-mn.Central.Sun.COM [10.1.170.217])	by dm-central-02.central.sun.com
 (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4FGwtAb039244; Thu,
 15 May 2008 10:58:56 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM (localhost [127.0.0.1])
	by kickball-mn.Central.Sun.COM (8.13.6+Sun/8.13.6)
 with ESMTP id m4FGpQnH012066; Thu, 15 May 2008 11:51:26 -0500 (CDT)
Received: (from roehrich@localhost)	by kickball-mn.Central.Sun.COM
 (8.13.6+Sun/8.13.6/Submit) id m4FGpQd2012065; Thu,
 15 May 2008 11:51:26 -0500 (CDT)
Date: Thu, 15 May 2008 11:51:26 -0500
From: Dean Roehrich <Dean.Roehrich@sun.com>
Subject: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack timeout
 05/22/2008]
To: psarc-ext@sun.com
Message-id: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
User-Agent: Mutt/1.5.9i
Status: RO
Content-Length: 2382


I am sponsoring this case for Roman Saucedo.  Timeout is set for 05/22/2008.

Functional spec and SMF xml files are in the case directory.

Release binding is Minor.


Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI
This information is Copyright 2008 Sun Microsystems
1. Introduction
    1.1. Project/Component Working Name:
         SAM-QFS SMF Management of sam-fsd
    1.2. Name of Document Author/Supplier:
         Author:  Roman Saucedo
    1.3  Date of This Document:
         15 May, 2008
4. Technical Description
Proposal:

	Place the SAM-QFS sam-fsd daemon under SMF management.  This daemon
	manages SAM-QFS configuration and other SAM-QFS daemons.  Currently
	this daemon relies on init for start/restart.  This is phase 1.

	The other SAM-QFS daemons will be reworked for SMF in phase 2 of this
	effort.  None of these other daemons rely on init for start/restart.

Detail:

	Today, the existing sam-fsd daemon determines that it is started by
	init, and needs to be a daemon, based on it parent pid.  If its parent
	is not init then it just validates the configuration and exits.

	The sam-fsd daemon will be modified to take a -N option which can be
	use to query for any configured SAM-QFS filesystems.  A new -D option
	will be added to tell sam-fsd that it was started by "the system" and
	it should be a daemon.

	For Shared-QFS filesystems the network must be available and this is
	enforced by a new service, network/qfs/svc-shared-mount.  The new
	service manifest, qfs/shared-mount.xml, places dependencies on
	loopback and physical network interfaces prior to starting the service
	script.


Deliverables:

	/var/svc/manifest/system/sam-fsd.xml
	/var/svc/manifest/network/qfs/shared-mount.xml
	/lib/svc/method/svc-qfs-shared-mount
	/lib/svc/method/svc-sam-fsd

Exported Interfaces:

	sam-fsd			Committed Private	Commandline syntax
	/var/svc/manifest/network/qfs/shared-mount.xml
				Project Private		Executable location
	/lib/svc/method/svc-qfs-shared-mount
				Project Private		Executable location
	/var/svc/manifest/system/sam-fsd.xml
				Project Private		Executable location
	/lib/svc/method/svc-sam-fsd
				Project Private		Executable location


6. Resources and Schedule
    6.4. Steering Committee requested information
        6.4.1. Consolidation C-team Name:
                N/A
    6.5. ARC review type: FastTrack
    6.6. ARC Exposure: open

From Darren.Moffat@sun.com Thu May 15 10:22:30 2008
Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4FHMTKF019437
	for <psarc-ext@sac.sfbay.Sun.COM>; Thu, 15 May 2008 10:22:30 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m4FHMDOf024170
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Fri, 16 May 2008 01:22:28 +0800 (SGT)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K0X0050R6XEB000@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Thu, 15 May 2008 10:22:26 -0700 (PDT)
Received: from gmp-eb-inf-2.sun.com ([192.18.6.24])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K0X004KD6XCHX00@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu,
 15 May 2008 10:22:25 -0700 (PDT)
Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12])
	by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m4FHMOXu025163	for
 <psarc-ext@sun.com>; Thu, 15 May 2008 17:22:24 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0K0X00B016TBIY00@fe-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu,
 15 May 2008 18:22:24 +0100 (BST)
Received: from [129.156.173.21] by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0K0X00MLN6XA1W20@fe-emea-09.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Thu, 15 May 2008 18:22:24 +0100 (BST)
Date: Thu, 15 May 2008 18:22:22 +0100
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
Sender: Darren.Moffat@sun.com
To: Dean Roehrich <Dean.Roehrich@sun.com>
Cc: psarc-ext@sun.com
Message-id: <482C714E.5070301@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
User-Agent: Thunderbird 2.0.0.12 (X11/20080326)
Status: RO
Content-Length: 1597

Dean Roehrich wrote:
> 	For Shared-QFS filesystems the network must be available and this is
> 	enforced by a new service, network/qfs/svc-shared-mount.  The new

Why svc:/network/qfs/svc-shared-mount ?

Isn't the svc- redundant I would have expected one of these to be the FMRI:

	svc:/network/qfs/shared:default
	svc:/network/qfs/shared-mount:default
	svc:/network/qfs/shared/mount:default


> 	service manifest, qfs/shared-mount.xml, places dependencies on
> 	loopback and physical network interfaces prior to starting the service
> 	script.
> 
> 
> Deliverables:
> 
> 	/var/svc/manifest/system/sam-fsd.xml
> 	/var/svc/manifest/network/qfs/shared-mount.xml
> 	/lib/svc/method/svc-qfs-shared-mount
> 	/lib/svc/method/svc-sam-fsd
> 
> Exported Interfaces:
> 
> 	sam-fsd			Committed Private	Commandline syntax
> 	/var/svc/manifest/network/qfs/shared-mount.xml
> 				Project Private		Executable location
> 	/lib/svc/method/svc-qfs-shared-mount
> 				Project Private		Executable location
> 	/var/svc/manifest/system/sam-fsd.xml
> 				Project Private		Executable location
> 	/lib/svc/method/svc-sam-fsd
> 				Project Private		Executable location

The FMRI is an exported interface.

This case appears to export two new services (based on the fact that 
there are two method scripts and to manifests in /var/svc/manifest) what 
is the FMRI for the one with sam-fsd.xml manifest ?  Is that a 
deliverable from this case or some other one ?

Looks to me like there should also be a svc:/system/sam:default or 
similar.  Are there other parts to the sam service other than sam-fsd ?

-- 
Darren J Moffat

From roehrich@kickball-mn.Central.Sun.COM Thu May 15 13:42:17 2008
Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4FKgH0G025022
	for <psarc-ext@sac.sfbay.sun.com>; Thu, 15 May 2008 13:42:17 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m4FKgGQn023381
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Thu, 15 May 2008 13:42:16 -0700 (PDT)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K0X00L03G6GD700@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Thu, 15 May 2008 13:42:16 -0700 (PDT)
Received: from dm-central-01.central.sun.com ([129.147.62.4])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K0X00H16G6GOU90@nwk-avmta-2.sfbay.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu,
 15 May 2008 13:42:16 -0700 (PDT)
Received: from kickball-mn.Central.Sun.COM
 (kickball-mn.Central.Sun.COM [10.1.170.217])	by dm-central-01.central.sun.com
 (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4FKgEaP063919; Thu,
 15 May 2008 14:42:14 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM (localhost [127.0.0.1])
	by kickball-mn.Central.Sun.COM (8.13.6+Sun/8.13.6)
 with ESMTP id m4FKYitC000580; Thu, 15 May 2008 15:34:45 -0500 (CDT)
Received: (from roehrich@localhost)	by kickball-mn.Central.Sun.COM
 (8.13.6+Sun/8.13.6/Submit) id m4FKYiRQ000579; Thu,
 15 May 2008 15:34:44 -0500 (CDT)
Date: Thu, 15 May 2008 15:34:44 -0500
From: Dean Roehrich <Dean.Roehrich@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <482C714E.5070301@Sun.COM>
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: psarc-ext@sun.com, roman.saucedo@sun.com
Message-id: <20080515203444.GA537@kickball-mn.Central.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
 <482C714E.5070301@Sun.COM>
User-Agent: Mutt/1.5.9i
Status: RO
Content-Length: 1827

On Thu, May 15, 2008 at 06:22:22PM +0100, Darren J Moffat wrote:
> Dean Roehrich wrote:
> >	For Shared-QFS filesystems the network must be available and this is
> >	enforced by a new service, network/qfs/svc-shared-mount.  The new
> 
> Why svc:/network/qfs/svc-shared-mount ?

My mistake.  It shouldn't have the 'svc-' prefix.


> >Deliverables:
> >
> >	/var/svc/manifest/system/sam-fsd.xml
> >	/var/svc/manifest/network/qfs/shared-mount.xml
> >	/lib/svc/method/svc-qfs-shared-mount
> >	/lib/svc/method/svc-sam-fsd

        svc:/network/qfs/shared-mount
        svc:/system/sam-fsd


> >Exported Interfaces:
> >
> >	sam-fsd			Committed Private	Commandline syntax
> >	/var/svc/manifest/network/qfs/shared-mount.xml
> >				Project Private		Executable location
> >	/lib/svc/method/svc-qfs-shared-mount
> >				Project Private		Executable location
> >	/var/svc/manifest/system/sam-fsd.xml
> >				Project Private		Executable location
> >	/lib/svc/method/svc-sam-fsd
> >				Project Private		Executable location
> 
> The FMRI is an exported interface.

        svc:/network/qfs/shared-mount   Uncommitted
        svc:/system/sam-fsd             Uncommitted


> This case appears to export two new services (based on the fact that 
> there are two method scripts and to manifests in /var/svc/manifest) what 
> is the FMRI for the one with sam-fsd.xml manifest ?  Is that a 
> deliverable from this case or some other one ?

Corrections inserted above.  This case is delivering both services.

> Looks to me like there should also be a svc:/system/sam:default or 
> similar.  Are there other parts to the sam service other than sam-fsd ?

This case is concerned with the main filesystem daemon, sam-fsd, to get
SAM-QFS out of inittab.  The project team intends to deal with SAM itself in
another case.

(I'll be offline tomorrow.)

Dean

From Darren.Moffat@Sun.COM Fri May 16 03:03:50 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4GA3oEu019540
	for <psarc-ext@sac.sfbay.sun.com>; Fri, 16 May 2008 03:03:50 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m4GA3oTl012626
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Fri, 16 May 2008 04:03:50 -0600 (MDT)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K0Y00401HAELP00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Fri, 16 May 2008 04:03:50 -0600 (MDT)
Received: from gmp-eb-inf-1.sun.com ([192.18.6.21])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K0Y003KCHADZM00@brm-avmta-1.central.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Fri,
 16 May 2008 04:03:49 -0600 (MDT)
Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12])
	by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m4GA3m5m008166	for
 <psarc-ext@sun.com>; Fri, 16 May 2008 10:03:48 +0000 (GMT)
Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0K0Y00L01H5PKB00@fe-emea-10.sun.com>
 (original mail from Darren.Moffat@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Fri,
 16 May 2008 11:03:48 +0100 (BST)
Received: from [129.156.173.21] by fe-emea-10.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0K0Y00B5WHA2A810@fe-emea-10.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Fri, 16 May 2008 11:03:40 +0100 (BST)
Date: Fri, 16 May 2008 11:03:38 +0100
From: Darren J Moffat <Darren.Moffat@Sun.COM>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <20080515203444.GA537@kickball-mn.Central.Sun.COM>
Sender: Darren.Moffat@Sun.COM
To: Dean Roehrich <Dean.Roehrich@Sun.COM>
Cc: psarc-ext@Sun.COM, Roman.Saucedo@Sun.COM
Message-id: <482D5BFA.4040401@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
 <482C714E.5070301@Sun.COM> <20080515203444.GA537@kickball-mn.Central.Sun.COM>
User-Agent: Thunderbird 2.0.0.12 (X11/20080326)
Status: RO
Content-Length: 588

Dean Roehrich wrote:
> This case is concerned with the main filesystem daemon, sam-fsd, to get
> SAM-QFS out of inittab.  The project team intends to deal with SAM itself in
> another case.

Tiny nit but the service name generally shouldn't need to end in "d" for 
daemon.  So svc:/system/sam-fs:default is preferred over 
svc:/system/sam-fsd:default.  For example we use svs:/system/nfs/*.


What is the method_credential that these new services run the start/stop 
methods with ?  Do the services need to run as root with all privilege 
or can they run with less ?

-- 
Darren J Moffat

From roehrich@kickball-mn.Central.Sun.COM Mon May 19 11:40:59 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4JIewQA020872
	for <psarc-ext@sac.sfbay.sun.com>; Mon, 19 May 2008 11:40:59 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4JIet5X017951
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Mon, 19 May 2008 19:40:57 +0100 (BST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K1400909P876A00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Mon, 19 May 2008 12:40:55 -0600 (MDT)
Received: from dm-central-02.central.sun.com ([129.147.62.5])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K14008YUP875Q00@brm-avmta-1.central.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Mon,
 19 May 2008 12:40:55 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM
 (kickball-mn.Central.Sun.COM [10.1.170.217])	by dm-central-02.central.sun.com
 (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4JIerYV002251; Mon,
 19 May 2008 12:40:54 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM (localhost [127.0.0.1])
	by kickball-mn.Central.Sun.COM (8.13.6+Sun/8.13.6)
 with ESMTP id m4JIerWh013666; Mon, 19 May 2008 13:40:53 -0500 (CDT)
Received: (from roehrich@localhost)	by kickball-mn.Central.Sun.COM
 (8.13.6+Sun/8.13.6/Submit) id m4JIerFE013665; Mon,
 19 May 2008 13:40:53 -0500 (CDT)
Date: Mon, 19 May 2008 13:40:53 -0500
From: Dean Roehrich <Dean.Roehrich@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <482D5BFA.4040401@Sun.COM>
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: psarc-ext@sun.com, Roman.Saucedo@sun.com
Message-id: <20080519184053.GA13649@kickball-mn.Central.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
 <482C714E.5070301@Sun.COM> <20080515203444.GA537@kickball-mn.Central.Sun.COM>
 <482D5BFA.4040401@Sun.COM>
User-Agent: Mutt/1.5.9i
Status: RO
Content-Length: 862

On Fri, May 16, 2008 at 11:03:38AM +0100, Darren J Moffat wrote:
> Dean Roehrich wrote:
> >This case is concerned with the main filesystem daemon, sam-fsd, to get
> >SAM-QFS out of inittab.  The project team intends to deal with SAM itself 
> >in
> >another case.
> 
> Tiny nit but the service name generally shouldn't need to end in "d" for 
> daemon.  So svc:/system/sam-fs:default is preferred over 
> svc:/system/sam-fsd:default.  For example we use svs:/system/nfs/*.

sam-fsd is something that SAM-QFS customers recognize; they know what it is
and they're familiar with it.  The team is reluctant to hide it behind another
name.


> What is the method_credential that these new services run the start/stop 
> methods with ?  Do the services need to run as root with all privilege 
> or can they run with less ?

sam-fsd is run with root permissions.

Dean

From Darren.Moffat@sun.com Mon May 19 11:43:57 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4JIhvsr020973
	for <psarc-ext@sac.sfbay.sun.com>; Mon, 19 May 2008 11:43:57 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m4JIhui6009583
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Mon, 19 May 2008 12:43:57 -0600 (MDT)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K140090RPD7D600@brm-avmta-1.central.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Mon, 19 May 2008 12:43:55 -0600 (MDT)
Received: from gmp-eb-inf-1.sun.com ([192.18.6.21])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K14008ZMPD65M00@brm-avmta-1.central.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Mon,
 19 May 2008 12:43:55 -0600 (MDT)
Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11])
	by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m4JIhsPK026549	for
 <psarc-ext@sun.com>; Mon, 19 May 2008 18:43:54 +0000 (GMT)
Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0K1400601PBS7100@fe-emea-10.sun.com>
 (original mail from Darren.Moffat@Sun.COM)
 for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Mon,
 19 May 2008 19:43:54 +0100 (BST)
Received: from [129.156.173.21] by fe-emea-10.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0K14008PJPD57820@fe-emea-10.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Mon, 19 May 2008 19:43:53 +0100 (BST)
Date: Mon, 19 May 2008 19:43:53 +0100
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <20080519184053.GA13649@kickball-mn.Central.Sun.COM>
Sender: Darren.Moffat@sun.com
To: Dean Roehrich <Dean.Roehrich@sun.com>
Cc: psarc-ext@sun.com, Roman.Saucedo@sun.com
Message-id: <4831CA69.9020204@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
 <482C714E.5070301@Sun.COM> <20080515203444.GA537@kickball-mn.Central.Sun.COM>
 <482D5BFA.4040401@Sun.COM> <20080519184053.GA13649@kickball-mn.Central.Sun.COM>
User-Agent: Thunderbird 2.0.0.12 (X11/20080326)
Status: RO
Content-Length: 1001

Dean Roehrich wrote:
> On Fri, May 16, 2008 at 11:03:38AM +0100, Darren J Moffat wrote:
>> Dean Roehrich wrote:
>>> This case is concerned with the main filesystem daemon, sam-fsd, to get
>>> SAM-QFS out of inittab.  The project team intends to deal with SAM itself 
>>> in
>>> another case.
>> Tiny nit but the service name generally shouldn't need to end in "d" for 
>> daemon.  So svc:/system/sam-fs:default is preferred over 
>> svc:/system/sam-fsd:default.  For example we use svs:/system/nfs/*.
> 
> sam-fsd is something that SAM-QFS customers recognize; they know what it is
> and they're familiar with it.  The team is reluctant to hide it behind another
> name.
> 
> 
>> What is the method_credential that these new services run the start/stop 
>> methods with ?  Do the services need to run as root with all privilege 
>> or can they run with less ?
> 
> sam-fsd is run with root permissions.

uid == 0 or privs=all or both ?

Does it actually need all that privilege ?

-- 
Darren J Moffat

From roehrich@kickball-mn.Central.Sun.COM Mon May 19 12:38:33 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4JJcWdS022448
	for <psarc-ext@sac.sfbay.sun.com>; Mon, 19 May 2008 12:38:32 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4JJcPuh014775
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@Sun.COM>; Mon, 19 May 2008 20:38:31 +0100 (BST)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K1400F0FRW4F000@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@Sun.COM
 (ORCPT psarc-ext@Sun.COM); Mon, 19 May 2008 12:38:28 -0700 (PDT)
Received: from dm-central-02.central.sun.com ([129.147.62.5])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K1400BXGRW42750@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Mon,
 19 May 2008 12:38:28 -0700 (PDT)
Received: from kickball-mn.Central.Sun.COM
 (kickball-mn.Central.Sun.COM [10.1.170.217])	by dm-central-02.central.sun.com
 (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4JJcQ99064519; Mon,
 19 May 2008 13:38:27 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM (localhost [127.0.0.1])
	by kickball-mn.Central.Sun.COM (8.13.6+Sun/8.13.6)
 with ESMTP id m4JJcQUH013927; Mon, 19 May 2008 14:38:26 -0500 (CDT)
Received: (from roehrich@localhost)	by kickball-mn.Central.Sun.COM
 (8.13.6+Sun/8.13.6/Submit) id m4JJcQ0X013926; Mon,
 19 May 2008 14:38:26 -0500 (CDT)
Date: Mon, 19 May 2008 14:38:26 -0500
From: Dean Roehrich <Dean.Roehrich@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <4831CA69.9020204@Sun.COM>
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: psarc-ext@sun.com, Roman.Saucedo@sun.com
Message-id: <20080519193826.GA13905@kickball-mn.Central.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
 <482C714E.5070301@Sun.COM> <20080515203444.GA537@kickball-mn.Central.Sun.COM>
 <482D5BFA.4040401@Sun.COM>
 <20080519184053.GA13649@kickball-mn.Central.Sun.COM> <4831CA69.9020204@Sun.COM>
User-Agent: Mutt/1.5.9i
Status: RO
Content-Length: 514

On Mon, May 19, 2008 at 07:43:53PM +0100, Darren J Moffat wrote:
> >>What is the method_credential that these new services run the start/stop 
> >>methods with ?  Do the services need to run as root with all privilege 
> >>or can they run with less ?
> >
> >sam-fsd is run with root permissions.
> 
> uid == 0 or privs=all or both ?
> 
> Does it actually need all that privilege ?

So far there has been no effort to make SAM-QFS work with Trusted Solaris or
Trusted Extensions.  Is that what you're asking?

Dean

From Darren.Moffat@sun.com Mon May 19 12:47:16 2008
Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4JJlF4f022614
	for <psarc-ext@sac.sfbay.Sun.COM>; Mon, 19 May 2008 12:47:15 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m4JJl2f9002739
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Tue, 20 May 2008 03:47:14 +0800 (SGT)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K1400E0TSAN9V00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@Sun.COM); Mon, 19 May 2008 13:47:11 -0600 (MDT)
Received: from gmp-eb-inf-1.sun.com ([192.18.6.21])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K14008QHSAM6040@brm-avmta-1.central.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@Sun.COM); Mon,
 19 May 2008 13:47:10 -0600 (MDT)
Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe1.eu.sun.com [192.18.6.10])
	by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m4JJlAf8028972	for
 <psarc-ext@Sun.COM>; Mon, 19 May 2008 19:47:10 +0000 (GMT)
Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 id <0K1400601S7FPK00@fe-emea-09.sun.com>
 (original mail from Darren.Moffat@Sun.COM)
 for psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Mon,
 19 May 2008 20:47:10 +0100 (BST)
Received: from [129.156.173.21] by fe-emea-09.sun.com
 (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
 with ESMTPSA id <0K1400JRISAK3F20@fe-emea-09.sun.com> for psarc-ext@Sun.COM
 (ORCPT psarc-ext@Sun.COM); Mon, 19 May 2008 20:47:09 +0100 (BST)
Date: Mon, 19 May 2008 20:47:08 +0100
From: Darren J Moffat <Darren.Moffat@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <20080519193826.GA13905@kickball-mn.Central.Sun.COM>
Sender: Darren.Moffat@sun.com
To: Dean Roehrich <Dean.Roehrich@sun.com>
Cc: psarc-ext@sun.com, Roman.Saucedo@sun.com
Message-id: <4831D93C.7090707@Sun.COM>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
 <482C714E.5070301@Sun.COM> <20080515203444.GA537@kickball-mn.Central.Sun.COM>
 <482D5BFA.4040401@Sun.COM>
 <20080519184053.GA13649@kickball-mn.Central.Sun.COM>
 <4831CA69.9020204@Sun.COM> <20080519193826.GA13905@kickball-mn.Central.Sun.COM>
User-Agent: Thunderbird 2.0.0.12 (X11/20080326)
Status: RO
Content-Length: 880

Dean Roehrich wrote:
> On Mon, May 19, 2008 at 07:43:53PM +0100, Darren J Moffat wrote:
>>>> What is the method_credential that these new services run the start/stop 
>>>> methods with ?  Do the services need to run as root with all privilege 
>>>> or can they run with less ?
>>> sam-fsd is run with root permissions.
>> uid == 0 or privs=all or both ?
>>
>> Does it actually need all that privilege ?
> 
> So far there has been no effort to make SAM-QFS work with Trusted Solaris or
> Trusted Extensions.  Is that what you're asking?

Not it is not.  I'm asking how it works with standard Solaris 10. 
Solaris 10 kernel is always privilege aware regardless of wither or not 
Trusted Extensions is installed or enabled.

Please check if the daemon actually needs to run with uid==0 and 
privs=all by reviewing http://www.sun.com/blueprints/0206/819-5507.pdf

-- 
Darren J Moffat

From roehrich@kickball-mn.Central.Sun.COM Tue May 20 10:47:56 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4KHluKs025326
	for <psarc-ext@sac.sfbay.sun.com>; Tue, 20 May 2008 10:47:56 -0700 (PDT)
Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m4KHlo2S036394
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@Sun.COM>; Tue, 20 May 2008 11:47:50 -0600 (MDT)
Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by
 nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K160080LHFOJ000@nwk-avmta-2.sfbay.sun.com> for psarc-ext@Sun.COM
 (ORCPT psarc-ext@Sun.COM); Tue, 20 May 2008 10:47:48 -0700 (PDT)
Received: from dm-central-02.central.sun.com ([129.147.62.5])
 by nwk-avmta-2.sfbay.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K16006P1HFNO720@nwk-avmta-2.sfbay.sun.com> for
 psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Tue,
 20 May 2008 10:47:47 -0700 (PDT)
Received: from kickball-mn.Central.Sun.COM
 (kickball-mn.Central.Sun.COM [10.1.170.217])	by dm-central-02.central.sun.com
 (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4KHlkIq057471; Tue,
 20 May 2008 11:47:46 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM (localhost [127.0.0.1])
	by kickball-mn.Central.Sun.COM (8.13.6+Sun/8.13.6)
 with ESMTP id m4KHlkuU022363; Tue, 20 May 2008 12:47:46 -0500 (CDT)
Received: (from roehrich@localhost)	by kickball-mn.Central.Sun.COM
 (8.13.6+Sun/8.13.6/Submit) id m4KHljL6022362; Tue,
 20 May 2008 12:47:45 -0500 (CDT)
Date: Tue, 20 May 2008 12:47:45 -0500
From: Dean Roehrich <Dean.Roehrich@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <4831D93C.7090707@Sun.COM>
To: Darren J Moffat <Darren.Moffat@sun.com>
Cc: psarc-ext@sun.com, Roman.Saucedo@sun.com
Message-id: <20080520174745.GA22344@kickball-mn.Central.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
 <482C714E.5070301@Sun.COM> <20080515203444.GA537@kickball-mn.Central.Sun.COM>
 <482D5BFA.4040401@Sun.COM>
 <20080519184053.GA13649@kickball-mn.Central.Sun.COM>
 <4831CA69.9020204@Sun.COM>
 <20080519193826.GA13905@kickball-mn.Central.Sun.COM> <4831D93C.7090707@Sun.COM>
User-Agent: Mutt/1.5.9i
Status: RO
Content-Length: 1394

On Mon, May 19, 2008 at 08:47:08PM +0100, Darren J Moffat wrote:
> Dean Roehrich wrote:
> >On Mon, May 19, 2008 at 07:43:53PM +0100, Darren J Moffat wrote:
> >>>>What is the method_credential that these new services run the 
> >>>>start/stop methods with ?  Do the services need to run as root with all 
> >>>>privilege or can they run with less ?
> >>>sam-fsd is run with root permissions.
> >>uid == 0 or privs=all or both ?
> >>
> >>Does it actually need all that privilege ?
> >
> >So far there has been no effort to make SAM-QFS work with Trusted Solaris 
> >or
> >Trusted Extensions.  Is that what you're asking?
> 
> Not it is not.  I'm asking how it works with standard Solaris 10. 
> Solaris 10 kernel is always privilege aware regardless of wither or not 
> Trusted Extensions is installed or enabled.
> 
> Please check if the daemon actually needs to run with uid==0 and 
> privs=all by reviewing http://www.sun.com/blueprints/0206/819-5507.pdf

I spent some time with this today.  It's not clear to me that I'm exercising
all parts of just this daemon, and I'm concerned about the other SAM-QFS
daemons spawned by this one and the number of different team members who have
to be involved to ensure we cover all paths.  If it is necessary to muzzle
SAM-QFS daemons then I'd prefer that we address this in a different case.

So, yes, we'd prefer to run as uid==0 and privs=all.

Dean

From glenn.skinner@sun.com Tue May 20 10:54:37 2008
Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4KHsb2V026001
	for <psarc-ext@sac.sfbay.sun.com>; Tue, 20 May 2008 10:54:37 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m4KHsar8038441;
	Tue, 20 May 2008 11:54:36 -0600 (MDT)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K1600509HR0XT00@brm-avmta-1.central.sun.com>; Tue,
 20 May 2008 11:54:36 -0600 (MDT)
Received: from ivrel.sfbay.sun.com ([129.146.74.76])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K1600LFHHR0NR60@brm-avmta-1.central.sun.com>; Tue,
 20 May 2008 11:54:36 -0600 (MDT)
Received: from ivrel (ivrel [129.146.74.76])
	by ivrel.sfbay.sun.com (8.13.8+Sun/8.13.8) with SMTP id m4KHsZU0014043; Tue,
 20 May 2008 10:54:35 -0700 (PDT)
Date: Tue, 20 May 2008 10:54:35 -0700 (PDT)
From: Glenn Skinner <glenn.skinner@sun.com>
Subject: Re: 2008/326 [SAM-QFS SMF Management of sam-fsd]
To: psarc-ext@sun.com, Dean.Roehrich@sun.com
Cc: Roman.Saucedo@sun.com
Reply-to: Glenn Skinner <glenn.skinner@sun.com>
Message-id: <200805201754.m4KHsZU0014043@ivrel.sfbay.sun.com>
MIME-version: 1.0
X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.6_36 SunOS 5.11 sun4u sparc
Content-type: TEXT/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-MD5: GtAItrWD9eBhTntxqYO6XA==
X-PMX-Version: 5.4.1.325704
Status: RO
Content-Length: 1005

    Date: Tue, 20 May 2008 12:47:45 -0500
    From: Dean Roehrich <Dean.Roehrich@sun.com>
    Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326
	    FastTrack timeout 05/22/2008]

    On Mon, May 19, 2008 at 08:47:08PM +0100, Darren J Moffat wrote:

    > Please check if the daemon actually needs to run with uid==0 and 
    > privs=all by reviewing http://www.sun.com/blueprints/0206/819-5507.pdf

    I spent some time with this today.  It's not clear to me that I'm
    exercising all parts of just this daemon, and I'm concerned about
    the other SAM-QFS daemons spawned by this one and the number of
    different team members who have to be involved to ensure we cover
    all paths.  If it is necessary to muzzle SAM-QFS daemons then I'd
    prefer that we address this in a different case.

    So, yes, we'd prefer to run as uid==0 and privs=all.

It seems to me that this concern would best be handled by filing a bug
report (if necessary, and then fixing the bug).

		-- Glenn


From roehrich@kickball-mn.Central.Sun.COM Tue May 20 11:48:15 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4KImEk4028095
	for <psarc-ext@sac.sfbay.sun.com>; Tue, 20 May 2008 11:48:15 -0700 (PDT)
Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4KIlbaa001035
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Tue, 20 May 2008 19:48:14 +0100 (BST)
Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by
 brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K1600901K8CXX00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Tue, 20 May 2008 12:48:12 -0600 (MDT)
Received: from dm-central-01.central.sun.com ([129.147.62.4])
 by brm-avmta-1.central.sun.com
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K1600LS4K8BNR90@brm-avmta-1.central.sun.com> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Tue,
 20 May 2008 12:48:11 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM
 (kickball-mn.Central.Sun.COM [10.1.170.217])	by dm-central-01.central.sun.com
 (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4KImAFI027025; Tue,
 20 May 2008 12:48:10 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM (localhost [127.0.0.1])
	by kickball-mn.Central.Sun.COM (8.13.6+Sun/8.13.6)
 with ESMTP id m4KImAuh022566; Tue, 20 May 2008 13:48:10 -0500 (CDT)
Received: (from roehrich@localhost)	by kickball-mn.Central.Sun.COM
 (8.13.6+Sun/8.13.6/Submit) id m4KImALY022565; Tue,
 20 May 2008 13:48:10 -0500 (CDT)
Date: Tue, 20 May 2008 13:48:10 -0500
From: Dean Roehrich <Dean.Roehrich@sun.com>
Subject: Re: 2008/326 [SAM-QFS SMF Management of sam-fsd]
In-reply-to: <200805201754.m4KHsZU0014043@ivrel.sfbay.sun.com>
To: Glenn Skinner <glenn.skinner@sun.com>
Cc: psarc-ext@sun.com, Roman.Saucedo@sun.com
Message-id: <20080520184810.GA22558@kickball-mn.Central.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <200805201754.m4KHsZU0014043@ivrel.sfbay.sun.com>
User-Agent: Mutt/1.5.9i
Status: RO
Content-Length: 1176

On Tue, May 20, 2008 at 10:54:35AM -0700, Glenn Skinner wrote:
>     Date: Tue, 20 May 2008 12:47:45 -0500
>     From: Dean Roehrich <Dean.Roehrich@sun.com>
>     Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326
> 	    FastTrack timeout 05/22/2008]
> 
>     On Mon, May 19, 2008 at 08:47:08PM +0100, Darren J Moffat wrote:
> 
>     > Please check if the daemon actually needs to run with uid==0 and 
>     > privs=all by reviewing http://www.sun.com/blueprints/0206/819-5507.pdf
> 
>     I spent some time with this today.  It's not clear to me that I'm
>     exercising all parts of just this daemon, and I'm concerned about
>     the other SAM-QFS daemons spawned by this one and the number of
>     different team members who have to be involved to ensure we cover
>     all paths.  If it is necessary to muzzle SAM-QFS daemons then I'd
>     prefer that we address this in a different case.
> 
>     So, yes, we'd prefer to run as uid==0 and privs=all.
> 
> It seems to me that this concern would best be handled by filing a bug
> report (if necessary, and then fixing the bug).

That approach sounds good to me.  I'll open an RFE against the product.

Dean

From roehrich@kickball-mn.Central.Sun.COM Wed May 21 17:13:48 2008
Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165])
	by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m4M0DlRM005525
	for <psarc-ext@sac.sfbay.sun.com>; Wed, 21 May 2008 17:13:47 -0700 (PDT)
Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74])
	by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4M0DjsJ019292
	for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Thu, 22 May 2008 01:13:46 +0100 (BST)
Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
 nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 id <0K1800J03TYVMA00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com
 (ORCPT psarc-ext@sun.com); Wed, 21 May 2008 17:13:43 -0700 (PDT)
Received: from dm-central-02.central.sun.com ([129.147.62.5])
 by nwk-avmta-1.sfbay.Sun.COM
 (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005))
 with ESMTP id <0K1800IQ3TYV5A00@nwk-avmta-1.sfbay.Sun.COM> for
 psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed,
 21 May 2008 17:13:43 -0700 (PDT)
Received: from kickball-mn.Central.Sun.COM
 (kickball-mn.Central.Sun.COM [10.1.170.217])	by dm-central-02.central.sun.com
 (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m4M0Dh8w037145; Wed,
 21 May 2008 18:13:43 -0600 (MDT)
Received: from kickball-mn.Central.Sun.COM (localhost [127.0.0.1])
	by kickball-mn.Central.Sun.COM (8.13.6+Sun/8.13.6)
 with ESMTP id m4M0Dg6h007995; Wed, 21 May 2008 19:13:42 -0500 (CDT)
Received: (from roehrich@localhost)	by kickball-mn.Central.Sun.COM
 (8.13.6+Sun/8.13.6/Submit) id m4M0Dg5R007994; Wed,
 21 May 2008 19:13:42 -0500 (CDT)
Date: Wed, 21 May 2008 19:13:42 -0500
From: Dean Roehrich <Dean.Roehrich@sun.com>
Subject: Re: SAM-QFS SMF Management of sam-fsd [PSARC/2008/326 FastTrack
 timeout 05/22/2008]
In-reply-to: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
To: psarc-ext@sun.com
Cc: roman.saucedo@sun.com, ted.pogue@sun.com
Message-id: <20080522001342.GA7958@kickball-mn.Central.Sun.COM>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-PMX-Version: 5.4.1.325704
References: <20080515165126.GA12061@kickball-mn.Central.Sun.COM>
User-Agent: Mutt/1.5.9i
Status: RO
Content-Length: 144

This case was approved at today's PSARC meeting.

I've placed a final.spec file in the case directory reflecting the agreed-upon
changes.

Dean

