From casper@sac.sfbay.sun.com Fri Jul 3 05:45:21 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63CjKoI013018 for ; Fri, 3 Jul 2009 05:45:21 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n63CjIeC028749; Fri, 3 Jul 2009 13:45:19 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700H0BI3I4R00@nwk-avmta-1.sfbay.Sun.COM>; Fri, 03 Jul 2009 05:45:18 -0700 (PDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700362I3FLSF0@nwk-avmta-1.sfbay.Sun.COM>; Fri, 03 Jul 2009 05:45:16 -0700 (PDT) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n63CjF7f031522; Fri, 03 Jul 2009 05:45:15 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63CjEAs013013; Fri, 03 Jul 2009 05:45:14 -0700 (PDT) Received: (from casper@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id n63CjEs0013009; Fri, 03 Jul 2009 05:45:14 -0700 (PDT) Date: Fri, 03 Jul 2009 05:45:14 -0700 (PDT) From: Casper Dik Subject: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] To: PSARC-ext@sun.com Message-id: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 2681 Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI This information is Copyright 2009 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Basic File Privileges 1.2. Name of Document Author/Supplier: Author: Casper Dik 1.3 Date of This Document: 03 July, 2009 4. Technical Description I'm sponsoring this fasttrack for myself. This project proposes two new "basic" privileges. FILE_READ Allows a process to read a file or directory whose permission or ACL allow the process read permission. FILE_WRITE Allows a process to write a file or directory whose permission or ACL allow the process write permission. The purpose of these privileges is the ability to create a "read-only" (no FILE_WRITE privilege) and a "write-only" (no FILE_READ privilege) process. The FILE_WRITE basic privilege is required for any modification to a file or directory: open(2), creat(2), link(2), symlink(2), rename(2), unlink(2), mkdir(2), rmdir(2), mknod(2) etc. The FILE_READ basic privilege is required for opening a file with O_RDONLY or O_RDWR. Note: a "basic" privilege is a privilege which is part of the default I, P and E privilege set. --- open.2 Fri Jul 3 11:27:25 2009 +++ open.2.new Fri Jul 3 11:51:58 2009 @@ -288,6 +288,11 @@ to open files for reading regardless of permis- sion bits. + To open a file for reading or writing, + the basic privileges {PRIV_FILE_READ} and + {PRIV_FILE_WRITE} need to be asserted in the + effective set, respectively. + EAGAIN A mandatory share reservation could not be obtained because the desired access conflicts with an existing f_deny share reservation. --- privileges.5 Thu Jul 2 17:41:57 2009 +++ privileges.5.new Thu Jul 2 18:58:36 2009 @@ -101,6 +101,14 @@ privileges are required to write files owned by UID 0 in the absence of an effective UID of 0. + PRIV_FILE_READ + Allows a process to read a file or directory whose + permission or ACL allow the process read permission. + + PRIV_FILE_WRITE + Allows a process to write a file or directory whose + permission or ACL allow the process write permission. + PRIV_FILE_DOWNGRADE_SL Allow a process to set the sensitivity label of a file or 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Darren.Moffat@sun.com Fri Jul 3 05:57:59 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63Cvw5b013390 for ; Fri, 3 Jul 2009 05:57:59 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n63Cvp2E006941 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 3 Jul 2009 20:57:58 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700103IOK5400@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 03 Jul 2009 05:57:56 -0700 (PDT) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700B0TIOJQP80@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 03 Jul 2009 05:57:56 -0700 (PDT) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n63CvtOU010570 for ; Fri, 03 Jul 2009 12:57:55 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KM700K00I2GWR00@fe-emea-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 03 Jul 2009 13:57:55 +0100 (BST) Received: from [129.156.173.199] ([unknown] [129.156.173.199]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KM7006L4IO6ZY80@fe-emea-09.sun.com>; Fri, 03 Jul 2009 13:57:43 +0100 (BST) Date: Fri, 03 Jul 2009 13:57:42 +0100 From: Darren J Moffat Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> Sender: Darren.Moffat@sun.com To: Casper Dik Cc: PSARC-ext@sun.com Message-id: <4A4E0046.2030203@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.18 (X11/20090127) Status: RO Content-Length: 167 I'm happy with this case as specified so +1. I'm going on the assumption that this works for all filesystems that privileges currently work for. -- Darren J Moffat From casper@holland.sun.com Fri Jul 3 06:03:18 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63D3HQO013525 for ; Fri, 3 Jul 2009 06:03:18 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n63D3GHm031119 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Fri, 3 Jul 2009 07:03:17 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700J0DIXGLC00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 06:03:16 -0700 (PDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700HI8IXFMI20@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 06:03:16 -0700 (PDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n63D3D0n049466; Fri, 03 Jul 2009 14:03:13 +0100 (BST) Date: Fri, 03 Jul 2009 15:03:13 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <4A4E0046.2030203@Sun.COM> Sender: casper@holland.sun.com To: Darren J Moffat Cc: Casper Dik , PSARC-ext@sun.com Message-id: <200907031303.n63D3D0n049466@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <4A4E0046.2030203@Sun.COM> Status: RO Content-Length: 595 >I'm happy with this case as specified so +1. > >I'm going on the assumption that this works for all filesystems that >privileges currently work for. Thanks, At this point the implementation is such that if DAC permission is granted, then we never call any of the secpolicy routines. Clearly, for these privileges to work the filesystems need to be changed; when this project is completed, we will have complete support for the filesystems in OS-Net plus whatever support we will implement in the VOP_* layer. Other filesystems such as VxFS, QFS, SamFS will need to be modified. Casper From Sebastien.Roy@sun.com Fri Jul 3 07:17:29 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63EHTdO014574 for ; Fri, 3 Jul 2009 07:17:29 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n63EHQvr012823 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 3 Jul 2009 07:17:29 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700303MD4GN00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Fri, 03 Jul 2009 08:17:28 -0600 (MDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700B5WMD4MDB0@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Fri, 03 Jul 2009 08:17:28 -0600 (MDT) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n63EHS9T001127 for ; Fri, 03 Jul 2009 14:17:28 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KM700K00M8RD600@mail-amer.sun.com> for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Fri, 03 Jul 2009 08:17:28 -0600 (MDT) Received: from [192.168.1.5] ([unknown] [173.76.18.185]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KM700HW7MD3TN90@mail-amer.sun.com>; Fri, 03 Jul 2009 08:17:28 -0600 (MDT) Date: Fri, 03 Jul 2009 10:17:27 -0400 From: Sebastien Roy Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> Sender: Sebastien.Roy@sun.com To: Casper Dik Cc: PSARC-ext@sun.com Message-id: <1246630647.2354.18.camel@seb> Organization: Sun Microsystems MIME-version: 1.0 X-Mailer: Evolution 2.26.1.1 Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> Status: RO Content-Length: 774 On Fri, 2009-07-03 at 05:45 -0700, Casper Dik wrote: > This project proposes two new "basic" privileges. > > FILE_READ > Allows a process to read a file or directory whose > permission or ACL allow the process read permission. > > FILE_WRITE > Allows a process to write a file or directory whose > permission or ACL allow the process write permission. I have no problem with these new privileges, but do have one question regarding the semantics of adding them to the basic set. How will this affect processes that may be specifying individual privileges in the "basic" set by enumeration rather than specifying "basic" itself in the various APIs? Will they cease to be able to read and write files? Do such applications exist? -Seb From casper@holland.sun.com Fri Jul 3 07:32:22 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63EWMPv014726 for ; Fri, 3 Jul 2009 07:32:22 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n63EWLw3018662 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Fri, 3 Jul 2009 07:32:22 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700505N1X3600@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 08:32:21 -0600 (MDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700B06N1WMKD0@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 08:32:21 -0600 (MDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n63EWIMs013733; Fri, 03 Jul 2009 15:32:18 +0100 (BST) Date: Fri, 03 Jul 2009 16:32:18 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <1246630647.2354.18.camel@seb> Sender: casper@holland.sun.com To: Sebastien Roy Cc: Casper Dik , PSARC-ext@sun.com Message-id: <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> Status: RO Content-Length: 1338 >On Fri, 2009-07-03 at 05:45 -0700, Casper Dik wrote: >> This project proposes two new "basic" privileges. >> >> FILE_READ >> Allows a process to read a file or directory whose >> permission or ACL allow the process read permission. >> >> FILE_WRITE >> Allows a process to write a file or directory whose >> permission or ACL allow the process write permission. > >I have no problem with these new privileges, but do have one question >regarding the semantics of adding them to the basic set. How will this >affect processes that may be specifying individual privileges in the >"basic" set by enumeration rather than specifying "basic" itself in the >various APIs? Will they cease to be able to read and write files? Do >such applications exist? When define a "set of privileges", you must start with the basic set. This is how the basic set is defined. The basic set is extensible. Perhaps we need to force that in SMF and in user_attr. Within Solaris, I found only one manifest which listed needed privileges but it has recently been fixed. The private interfaces __init_daemon_priv and __init_suid_priv will always add the basic set. The only time when we actually set a limit set to {empty} is by setting the limit set but we only do that when we do not expect any execve calls. Casper From Sebastien.Roy@sun.com Fri Jul 3 07:39:23 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63EdM6s014839 for ; Fri, 3 Jul 2009 07:39:23 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n63EdK18009516 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 3 Jul 2009 08:39:22 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700707NDLZL00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 07:39:21 -0700 (PDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700BNYNDLQKD0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 07:39:21 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n63EdLip002617 for ; Fri, 03 Jul 2009 14:39:21 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KM700B00N0DJJ00@mail-amer.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 08:39:21 -0600 (MDT) Received: from [192.168.1.5] ([unknown] [173.76.18.185]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KM700E98NDK2310@mail-amer.sun.com>; Fri, 03 Jul 2009 08:39:20 -0600 (MDT) Date: Fri, 03 Jul 2009 10:39:19 -0400 From: Sebastien Roy Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> Sender: Sebastien.Roy@sun.com To: Casper.Dik@sun.com Cc: Casper Dik , PSARC-ext@sun.com Message-id: <1246631959.2354.24.camel@seb> Organization: Sun Microsystems MIME-version: 1.0 X-Mailer: Evolution 2.26.1.1 Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> Status: RO Content-Length: 1718 On Fri, 2009-07-03 at 16:32 +0200, Casper.Dik@Sun.COM wrote: > >On Fri, 2009-07-03 at 05:45 -0700, Casper Dik wrote: > >I have no problem with these new privileges, but do have one question > >regarding the semantics of adding them to the basic set. How will this > >affect processes that may be specifying individual privileges in the > >"basic" set by enumeration rather than specifying "basic" itself in the > >various APIs? Will they cease to be able to read and write files? Do > >such applications exist? > > When define a "set of privileges", you must start with the basic set. > This is how the basic set is defined. The basic set is extensible. Okay. > Perhaps we need to force that in SMF and in user_attr. Within Solaris, I > found only one manifest which listed needed privileges but it has recently > been fixed. Right; SMF manifests is one area that I was thinking where this could have been a problem. Another is applications that might be doing this kind of thing: 1. application starts with all kinds of privileges including basic 2. application needs to fork a child that only needs to read and write to files it owns 3. application calls fork, and then in the child calls setppriv() with the empty set assuming that it needs no privileges to read and write files that it owns I think these (if they exist) will break. I know I have one of these in my project gate that I'll have to fix. ;-) > The private interfaces __init_daemon_priv and __init_suid_priv will > always add the basic set. > > The only time when we actually set a limit set to {empty} is by setting > the limit set but we only do that when we do not expect any execve calls. Right; like the above example. -Seb From casper@holland.sun.com Fri Jul 3 07:43:32 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63EhVOq014880 for ; Fri, 3 Jul 2009 07:43:32 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n63EhLHi028263 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Fri, 3 Jul 2009 22:43:30 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700809NKH9V00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 07:43:29 -0700 (PDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700B0RNKEQFE0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 07:43:27 -0700 (PDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n63EhOXg017012; Fri, 03 Jul 2009 15:43:24 +0100 (BST) Date: Fri, 03 Jul 2009 16:43:24 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <1246631959.2354.24.camel@seb> Sender: casper@holland.sun.com To: Sebastien Roy Cc: Casper Dik , PSARC-ext@sun.com Message-id: <200907031443.n63EhOXg017012@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <1246631959.2354.24.camel@seb> Status: RO Content-Length: 1341 >Right; SMF manifests is one area that I was thinking where this could >have been a problem. Another is applications that might be doing this >kind of thing: > >1. application starts with all kinds of privileges including basic >2. application needs to fork a child that only needs to read and write >to files it owns >3. application calls fork, and then in the child calls setppriv() with >the empty set assuming that it needs no privileges to read and write >files that it owns > >I think these (if they exist) will break. I know I have one of these in >my project gate that I'll have to fix. ;-) Yeah, I guess you didn't follow the guidelines but if they are not spelled out then we need to fix the documentation. Perhaps it's hidden too well, but there are such bits as: To maintain future compatibility, the "basic" set of privileges is included as "basic,!missing_basic_priv1,...". When further currently unprivileged operations migrate to the basic privilege set, the conversion back of the result with priv_str_to_set() includes the additional basic privileges, guaranteeing that the resulting privilege set carries the same privileges. This behavior is the default and is equivalent to specifying a flag argument of PRIV_STR_PORT. Casper From Sebastien.Roy@sun.com Fri Jul 3 07:58:58 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n63EwvBX015241 for ; Fri, 3 Jul 2009 07:58:57 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n63EwuMg018574 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 3 Jul 2009 15:58:56 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KM700905OA8DP00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 07:58:56 -0700 (PDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KM700BYROA7QNC0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 07:58:55 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n63EwtPW012683 for ; Fri, 03 Jul 2009 14:58:55 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KM700100NV2AB00@mail-amer.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 03 Jul 2009 08:58:55 -0600 (MDT) Received: from [192.168.1.5] ([unknown] [173.76.18.185]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KM700E6WOA62350@mail-amer.sun.com>; Fri, 03 Jul 2009 08:58:55 -0600 (MDT) Date: Fri, 03 Jul 2009 10:58:53 -0400 From: Sebastien Roy Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907031443.n63EhOXg017012@dm-holland-02.uk.sun.com> Sender: Sebastien.Roy@sun.com To: Casper.Dik@sun.com Cc: Casper Dik , PSARC-ext@sun.com Message-id: <1246633133.2354.26.camel@seb> Organization: Sun Microsystems MIME-version: 1.0 X-Mailer: Evolution 2.26.1.1 Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <1246631959.2354.24.camel@seb> <200907031443.n63EhOXg017012@dm-holland-02.uk.sun.com> Status: RO Content-Length: 1557 On Fri, 2009-07-03 at 16:43 +0200, Casper.Dik@Sun.COM wrote: > > >Right; SMF manifests is one area that I was thinking where this could > >have been a problem. Another is applications that might be doing this > >kind of thing: > > > >1. application starts with all kinds of privileges including basic > >2. application needs to fork a child that only needs to read and write > >to files it owns > >3. application calls fork, and then in the child calls setppriv() with > >the empty set assuming that it needs no privileges to read and write > >files that it owns > > > >I think these (if they exist) will break. I know I have one of these in > >my project gate that I'll have to fix. ;-) > > Yeah, I guess you didn't follow the guidelines but if they are not > spelled out then we need to fix the documentation. > > Perhaps it's hidden too well, but there are such bits as: > > To maintain future compatibility, the "basic" set of > privileges is included as "basic,!missing_basic_priv1,...". > When further currently unprivileged operations migrate to > the basic privilege set, the conversion back of the result > with priv_str_to_set() includes the additional basic > privileges, guaranteeing that the resulting privilege set > carries the same privileges. This behavior is the default > and is equivalent to specifying a flag argument of > PRIV_STR_PORT. Indeed, the documentation could be more explicit. Thanks for the clarifications. +1 on this case. -Seb From Nicolas.Williams@sun.com Sun Jul 5 05:04:22 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n65C4LHH003727 for ; Sun, 5 Jul 2009 05:04:21 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n65C4ItN015433 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Sun, 5 Jul 2009 13:04:20 +0100 (BST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMB007055J69M00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Sun, 05 Jul 2009 06:04:18 -0600 (MDT) Received: from binky.Central.Sun.COM ([129.153.128.104]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMB00ERM5J5R750@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Sun, 05 Jul 2009 06:04:17 -0600 (MDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id n65C1Yvd018841; Sun, 05 Jul 2009 07:01:34 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id n65C1Yxx018840; Sun, 05 Jul 2009 07:01:34 -0500 (CDT) Date: Sun, 05 Jul 2009 07:01:34 -0500 From: Nicolas Williams Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> To: Casper Dik Cc: PSARC-ext@sun.com Message-id: <20090705120134.GD15302@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i Status: RO Content-Length: 886 On Fri, Jul 03, 2009 at 05:45:14AM -0700, Casper Dik wrote: > This project proposes two new "basic" privileges. > > FILE_READ > Allows a process to read a file or directory whose > permission or ACL allow the process read permission. > > FILE_WRITE > Allows a process to write a file or directory whose > permission or ACL allow the process write permission. Does not having basic file privileges affect a process' ability to receive, via IPC, open file descriptors with contrary access? It might be useful to have a way to grant a process read and/or write access to specific objects while still denying it the right to do so in general. The simplest way to do that that I can imagine is by adding an additional pair of basic file privileges that apply only to files in the current directory (not following symlinks) and, perhaps, below. Nico -- From casper@holland.sun.com Sun Jul 5 08:12:29 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n65FCSLB008933 for ; Sun, 5 Jul 2009 08:12:28 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n65FCM9Y016174 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Sun, 5 Jul 2009 23:12:27 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMB00703E8PEL00@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Sun, 05 Jul 2009 09:12:25 -0600 (MDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMB00MH7E8O6X10@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Sun, 05 Jul 2009 09:12:24 -0600 (MDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n65FCMds063860; Sun, 05 Jul 2009 16:12:22 +0100 (BST) Date: Sun, 05 Jul 2009 17:12:22 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <20090705120134.GD15302@Sun.COM> Sender: casper@holland.sun.com To: Nicolas Williams Cc: PSARC-ext@sun.com Message-id: <200907051512.n65FCMds063860@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <20090705120134.GD15302@Sun.COM> Status: RO Content-Length: 938 >On Fri, Jul 03, 2009 at 05:45:14AM -0700, Casper Dik wrote: >> This project proposes two new "basic" privileges. >> >> FILE_READ >> Allows a process to read a file or directory whose >> permission or ACL allow the process read permission. >> >> FILE_WRITE >> Allows a process to write a file or directory whose >> permission or ACL allow the process write permission. > >Does not having basic file privileges affect a process' ability to >receive, via IPC, open file descriptors with contrary access? No. >It might be useful to have a way to grant a process read and/or write >access to specific objects while still denying it the right to do so in >general. The simplest way to do that that I can imagine is by adding an >additional pair of basic file privileges that apply only to files in the >current directory (not following symlinks) and, perhaps, below. See, e.g., PSARC 2008/109 Casper From edward.pilatowicz@sun.com Mon Jul 6 10:49:41 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n66Hnfmo007623 for ; Mon, 6 Jul 2009 10:49:41 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n66Hnc4j041120 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 6 Jul 2009 11:49:41 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMD00I07G6SKX00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 06 Jul 2009 10:49:40 -0700 (PDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMD00HRAG6S6B10@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 06 Jul 2009 10:49:40 -0700 (PDT) Received: from eng.sun.com (cretaceous.SFBay.Sun.COM [129.146.17.63]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n66HncJx028436; Mon, 06 Jul 2009 10:49:38 -0700 (PDT) Date: Mon, 06 Jul 2009 10:49:38 -0700 From: Edward Pilatowicz Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> To: Casper.Dik@sun.com Cc: Sebastien Roy , Casper Dik , PSARC-ext@sun.com Message-id: <20090706174937.GA993184@eng.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> User-Agent: Mutt/1.5.19 (2009-01-05) Status: RO Content-Length: 1308 On Fri, Jul 03, 2009 at 04:32:18PM +0200, Casper.Dik@sun.com wrote: > > >On Fri, 2009-07-03 at 05:45 -0700, Casper Dik wrote: > >> This project proposes two new "basic" privileges. > >> > >> FILE_READ > >> Allows a process to read a file or directory whose > >> permission or ACL allow the process read permission. > >> > >> FILE_WRITE > >> Allows a process to write a file or directory whose > >> permission or ACL allow the process write permission. > > > >I have no problem with these new privileges, but do have one question > >regarding the semantics of adding them to the basic set. How will this > >affect processes that may be specifying individual privileges in the > >"basic" set by enumeration rather than specifying "basic" itself in the > >various APIs? Will they cease to be able to read and write files? Do > >such applications exist? > > When define a "set of privileges", you must start with the basic set. hey casper, fyi, this is not how zones works. zones starts with the empty set and then adds privs. please see the brand config.xml files for where this is defined. you'll need to upate these files with these new privileges. (and feel free to file an RFE against zones to start with the basic set and then add or remove privs as necessary.) ed From casper@holland.sun.com Mon Jul 6 11:18:46 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n66IIkZB008680 for ; Mon, 6 Jul 2009 11:18:46 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n66IIitr058357 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Mon, 6 Jul 2009 12:18:45 -0600 (MDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMD00A01HJ9CC00@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 06 Jul 2009 12:18:45 -0600 (MDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMD005NMHJ8FT20@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 06 Jul 2009 12:18:44 -0600 (MDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n66IIcK5045346; Mon, 06 Jul 2009 19:18:38 +0100 (BST) Date: Mon, 06 Jul 2009 20:18:38 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <20090706174937.GA993184@eng.sun.com> Sender: casper@holland.sun.com To: Edward Pilatowicz Cc: Sebastien Roy , Casper Dik , PSARC-ext@sun.com Message-id: <200907061818.n66IIcK5045346@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <20090706174937.GA993184@eng.sun.com> Status: RO Content-Length: 420 >fyi, this is not how zones works. zones starts with the empty set and >then adds privs. please see the brand config.xml files for where this >is defined. you'll need to upate these files with these new privileges. >(and feel free to file an RFE against zones to start with the basic set >and then add or remove privs as necessary.) Ok, that's clearly broken. Doesn't it work correctly for native zones? Casper From edward.pilatowicz@sun.com Mon Jul 6 12:09:33 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n66J9WGl026010 for ; Mon, 6 Jul 2009 12:09:33 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n66J9JEk021319 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 7 Jul 2009 03:09:31 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMD0000FJVVVY00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 06 Jul 2009 12:09:31 -0700 (PDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMD00HKEJVU6F60@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 06 Jul 2009 12:09:30 -0700 (PDT) Received: from eng.sun.com (cretaceous.SFBay.Sun.COM [129.146.17.63]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n66J9TN0016276; Mon, 06 Jul 2009 12:09:29 -0700 (PDT) Date: Mon, 06 Jul 2009 12:09:28 -0700 From: Edward Pilatowicz Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907061818.n66IIcK5045346@dm-holland-02.uk.sun.com> To: Casper.Dik@sun.com Cc: Sebastien Roy , Casper Dik , PSARC-ext@sun.com Message-id: <20090706190928.GH993184@eng.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <20090706174937.GA993184@eng.sun.com> <200907061818.n66IIcK5045346@dm-holland-02.uk.sun.com> User-Agent: Mutt/1.5.19 (2009-01-05) Status: RO Content-Length: 597 On Mon, Jul 06, 2009 at 08:18:38PM +0200, Casper.Dik@Sun.COM wrote: > > > >fyi, this is not how zones works. zones starts with the empty set and > >then adds privs. please see the brand config.xml files for where this > >is defined. you'll need to upate these files with these new privileges. > >(and feel free to file an RFE against zones to start with the basic set > >and then add or remove privs as necessary.) > > Ok, that's clearly broken. Doesn't it work correctly for native > zones? > all brands work the same way wrt privs handling. it's all controlled by the config.xml file. ed From casper@holland.sun.com Mon Jul 6 13:17:47 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n66KHlAS013775 for ; Mon, 6 Jul 2009 13:17:47 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n66KHgh0026392 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Tue, 7 Jul 2009 04:17:46 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMD00A05N1JVG00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 06 Jul 2009 13:17:43 -0700 (PDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMD00MO0N1IA050@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 06 Jul 2009 13:17:43 -0700 (PDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n66KHd1B004616; Mon, 06 Jul 2009 21:17:39 +0100 (BST) Date: Mon, 06 Jul 2009 22:17:39 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <20090706174937.GA993184@eng.sun.com> Sender: casper@holland.sun.com To: Edward Pilatowicz Cc: Sebastien Roy , PSARC-ext@sun.com Message-id: <200907062017.n66KHd1B004616@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <20090706174937.GA993184@eng.sun.com> Status: RO Content-Length: 611 >hey casper, > >fyi, this is not how zones works. zones starts with the empty set and >then adds privs. please see the brand config.xml files for where this >is defined. you'll need to upate these files with these new privileges. >(and feel free to file an RFE against zones to start with the basic set >and then add or remove privs as necessary.) I looked through the code and it appears that the code tries to always adds "basic" to the 'default' set. It appears, then, that adding stuff the "basic" will just work except when you configure a zone without specifying "default" for limitpriv. Casper From casper@holland.sun.com Mon Jul 6 13:28:09 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n66KS8RF014103 for ; Mon, 6 Jul 2009 13:28:08 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n66KRq6Y001700 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Tue, 7 Jul 2009 04:28:07 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMD0062RNIT3R00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 06 Jul 2009 13:28:05 -0700 (PDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMD00H65NIR6DE0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 06 Jul 2009 13:28:03 -0700 (PDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n66KRxqV007082; Mon, 06 Jul 2009 21:27:59 +0100 (BST) Date: Mon, 06 Jul 2009 22:27:59 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <20090706190928.GH993184@eng.sun.com> Sender: casper@holland.sun.com To: Edward Pilatowicz Cc: Sebastien Roy , PSARC-ext@sun.com Message-id: <200907062027.n66KRxqV007082@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <20090706174937.GA993184@eng.sun.com> <200907061818.n66IIcK5045346@dm-holland-02.uk.sun.com> <20090706190928.GH993184@eng.sun.com> Status: RO Content-Length: 1155 >On Mon, Jul 06, 2009 at 08:18:38PM +0200, Casper.Dik@Sun.COM wrote: >> >> >> >fyi, this is not how zones works. zones starts with the empty set and >> >then adds privs. please see the brand config.xml files for where this >> >is defined. you'll need to upate these files with these new privileges. >> >(and feel free to file an RFE against zones to start with the basic set >> >and then add or remove privs as necessary.) >> >> Ok, that's clearly broken. Doesn't it work correctly for native >> zones? >> > >all brands work the same way wrt privs handling. it's all controlled by >the config.xml file. Check for "BASIC_TOKEN" in http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/lib/libzonecfg/common/libzonecfg.c#4950 and further. So generally will work. Unfortunately, the syntax used to describe "privilege sets": actually only accepts single privileges. For the basic set, we'd really want something like: The property of the basic set is that you cannot portably enumerate it. Casper From edward.pilatowicz@sun.com Tue Jul 7 10:59:26 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n67HxQKm022023 for ; Tue, 7 Jul 2009 10:59:26 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n67HxMTb017261 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 7 Jul 2009 11:59:26 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMF00005BB16B00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 07 Jul 2009 10:59:25 -0700 (PDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMF00ISDBB1BL50@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 07 Jul 2009 10:59:25 -0700 (PDT) Received: from eng.sun.com (cretaceous.SFBay.Sun.COM [129.146.17.59]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n67HxNYC053605; Tue, 07 Jul 2009 10:59:23 -0700 (PDT) Date: Tue, 07 Jul 2009 10:59:23 -0700 From: Edward Pilatowicz Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907062017.n66KHd1B004616@dm-holland-02.uk.sun.com> To: Casper.Dik@sun.com Cc: Sebastien Roy , PSARC-ext@sun.com Message-id: <20090707175923.GD524038@eng.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <20090706174937.GA993184@eng.sun.com> <200907062017.n66KHd1B004616@dm-holland-02.uk.sun.com> User-Agent: Mutt/1.5.19 (2009-01-05) Status: RO Content-Length: 882 On Mon, Jul 06, 2009 at 10:17:39PM +0200, Casper.Dik@Sun.COM wrote: > > > >hey casper, > > > >fyi, this is not how zones works. zones starts with the empty set and > >then adds privs. please see the brand config.xml files for where this > >is defined. you'll need to upate these files with these new privileges. > >(and feel free to file an RFE against zones to start with the basic set > >and then add or remove privs as necessary.) > > > I looked through the code and it appears that the code tries to always > adds "basic" to the 'default' set. > > It appears, then, that adding stuff the "basic" will just work except > when you configure a zone without specifying "default" for limitpriv. > oops. your right. i was confusing this with the need to update these config files with new non-basic privs that are required for correct system operation. sorry for the noise, ed From casper@holland.sun.com Tue Jul 7 13:07:14 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n67K7DIG027338 for ; Tue, 7 Jul 2009 13:07:14 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n67K78LM001276 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Wed, 8 Jul 2009 04:07:13 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMF00801H80I300@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Tue, 07 Jul 2009 13:07:12 -0700 (PDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMF00ILSH7ZBLD0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Tue, 07 Jul 2009 13:07:12 -0700 (PDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n67K78hd031634; Tue, 07 Jul 2009 21:07:08 +0100 (BST) Date: Tue, 07 Jul 2009 22:07:08 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <20090707175923.GD524038@eng.sun.com> Sender: casper@holland.sun.com To: Edward Pilatowicz Cc: Sebastien Roy , PSARC-ext@sun.com Message-id: <200907072007.n67K78hd031634@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> <1246630647.2354.18.camel@seb> <200907031432.n63EWIMs013733@dm-holland-02.uk.sun.com> <20090706174937.GA993184@eng.sun.com> <200907062017.n66KHd1B004616@dm-holland-02.uk.sun.com> <20090707175923.GD524038@eng.sun.com> Status: RO Content-Length: 1009 >On Mon, Jul 06, 2009 at 10:17:39PM +0200, Casper.Dik@Sun.COM wrote: >> >> >> >hey casper, >> > >> >fyi, this is not how zones works. zones starts with the empty set and >> >then adds privs. please see the brand config.xml files for where this >> >is defined. you'll need to upate these files with these new privileges. >> >(and feel free to file an RFE against zones to start with the basic set >> >and then add or remove privs as necessary.) >> >> >> I looked through the code and it appears that the code tries to always >> adds "basic" to the 'default' set. >> >> It appears, then, that adding stuff the "basic" will just work except >> when you configure a zone without specifying "default" for limitpriv. >> > >oops. your right. i was confusing this with the need to update these >config files with new non-basic privs that are required for correct >system operation. Still, I think we should need to add an option to add "basic,!needed" to the "required set" for a particular "brand". Casper From gdamore@sun.com Thu Jul 9 14:54:29 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n69LsTeQ006552 for ; Thu, 9 Jul 2009 14:54:29 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n69LsStr014843 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 9 Jul 2009 14:54:28 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMJ00101BISQZ00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 09 Jul 2009 14:54:28 -0700 (PDT) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMJ00JTZBIRZR30@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 09 Jul 2009 14:54:27 -0700 (PDT) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n69LsRhL011172 for ; Thu, 09 Jul 2009 14:54:27 -0700 (PDT) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KMJ00400AU3JR00@fe-sfbay-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 09 Jul 2009 14:54:27 -0700 (PDT) Received: from [192.168.251.11] ([unknown] [76.93.15.33]) by fe-sfbay-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KMJ00L0ZBIR5U70@fe-sfbay-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 09 Jul 2009 14:54:27 -0700 (PDT) Date: Thu, 09 Jul 2009 14:54:26 -0700 From: "Garrett D'Amore" Subject: PSARC 2009/378 Basic File Privileges Sender: Garrett.Damore@sun.com To: PSARC-ext Message-id: <4A566712.8090902@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 User-Agent: Thunderbird 2.0.0.18 (X11/20081201) Status: RO Content-Length: 59 This case was approved at PSARC yesterday. - Garrett From casper@holland.sun.com Sat Jul 11 02:08:57 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n6B98u42005411 for ; Sat, 11 Jul 2009 02:08:57 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n6B98qSu001974 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Sat, 11 Jul 2009 17:08:56 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KMM00B011EUD000@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Sat, 11 Jul 2009 02:08:54 -0700 (PDT) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KMM0071L1ETTI10@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Sat, 11 Jul 2009 02:08:54 -0700 (PDT) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n6B98rMb062705 for ; Sat, 11 Jul 2009 10:08:53 +0100 (BST) Date: Sat, 11 Jul 2009 11:08:52 +0200 From: Casper.Dik@sun.com Subject: Re: Basic File Privileges [PSARC/2009/378 FastTrack timeout 7/10/2009] In-reply-to: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> Sender: casper@holland.sun.com To: PSARC-ext@sun.com Message-id: <200907110908.n6B98rMb062705@dm-holland-02.uk.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200907031245.n63CjEs0013009@sac.sfbay.sun.com> Status: RO Content-Length: 81 This case was approved during the psarc meeting on Wednesday 8th, 2009. Casper