From sacadmin Thu Feb 25 08:53:32 2010 Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PGrWGI004456; Thu, 25 Feb 2010 08:53:32 -0800 (PST) Received: (from johnf@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id o1PGrWIZ004452; Thu, 25 Feb 2010 08:53:32 -0800 (PST) Date: Thu, 25 Feb 2010 08:53:32 -0800 (PST) From: John Fischer Message-Id: <201002251653.o1PGrWIZ004452@sac.sfbay.sun.com> To: PSARC-record@sac.sfbay.sun.com Cc: Sarah.Jelinek@sun.com, matt.keenan@sun.com Subject: Solaris GUI Install Users Screen Modification [PSARC/2010/069 FastTrack timeout 03/04/2010] Status: RO Content-Length: 586 Template Version: @(#)sac_nextcase 1.69 02/15/10 SMI This information is Copyright 2010 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Solaris GUI Install Users Screen Modification 1.2. Name of Document Author/Supplier: Author: Matt Keenan 1.3 Date of This Document: 25 February, 2010 4. Technical Description See the case directory for more detail 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: install 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From John.Fischer@sun.com Thu Feb 25 09:01:20 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PH1KRj004889 for ; Thu, 25 Feb 2010 09:01:20 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o1PH1HDb031700 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 10:01:19 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE00M1VPY7ON00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:01:19 -0700 (MST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00M1YPY7NI00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:01:19 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o1PH1IaT018157 for ; Thu, 25 Feb 2010 17:01:18 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00900MKB2U00@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:01:18 -0700 (MST) Received: from [192.168.10.8] ([unknown] [76.20.56.122]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE00A7KPXDVL20@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:00:49 -0700 (MST) Date: Thu, 25 Feb 2010 09:00:20 -0800 From: John Fischer Subject: PSARC/2010/069 - Solaris GUI Install Users Screen Modification Sender: John.Fischer@sun.com To: PSARC-ext Cc: Matt Keenan , Sarah Jelinek Reply-to: John.Fischer@sun.com Message-id: <4B86ACA4.1030604@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_vTol8WklLM8sr+eaNlq83Q)" X-PMX-Version: 5.4.1.325704 User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 2399 This is a multi-part message in MIME format. --Boundary_(ID_vTol8WklLM8sr+eaNlq83Q) Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT All, I am sponsoring this case for Matt Keenan of the installer team. The case directory contains this proposal. I have set the timer for next Thursday, March 4th, 2010. This project updates the Dwarf Caiman, New Solairs Install GUI (PSARC/2007/284), to remove the requirement of providing a root password. Given that the user / password has primary administrator role, this password is not needed. The Dwarf GUI interface remains Uncommitted. Thanks, John --Boundary_(ID_vTol8WklLM8sr+eaNlq83Q) Content-type: text/plain; name=proposal.txt Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=proposal.txt 1. Introduction 1.1. Project/Component Working Name: Solaris GUI Install Users Screen Modification 1.2. Name of Document Author/Supplier: Matt Keenan 1.3. Date of This Document: 02/24/2010 2. Project Summary 2.1. Project Description: Updates Users screen of Solaris GUI installer. The proposed updates are in response to Bug 1436 [1]. 4. Technical Description: 4.1. Details: The following updates are being carried out to the Users Screen of the Solaris Instaler - Remove both Root Password entry fields. - Entry of users login name and password is now mandatory. - Default root password is set to initial login password specified here. 4.2. Interfaces: Exported Interfaces Stability Comments ----------------------- -------------------- ------------- Dwarf GUI Uncommitted See [2] 4.3. Doc Impact: Installer inline help 4.4. Packaging & Delivery: SUNWgui-install 4.5. Dependencies: 4.6. L10N Impact: N/A 4.7. Security Impact: N/A 5. Reference Documents: [1] Installation does not need to ask Root Password http://defect.opensolaris.org/bz/show_bug.cgi?id=1436 [2] PSARC/2007/284 Dwarf Caiman, New Solairs Install GUI http://sac.sfbay/PSARC/2007/284/ [3] UIRB/2007/264 Dwarf Caiman UIRB Review Materials http://sac.sfbay/Archives/CaseLog/rb/UIRB/2007/264/ --Boundary_(ID_vTol8WklLM8sr+eaNlq83Q)-- From Darren.Moffat@sun.com Thu Feb 25 09:22:13 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PHMDRt005614 for ; Thu, 25 Feb 2010 09:22:13 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o1PHMC8F051275 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 10:22:13 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE0011RQX0US00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 09:22:12 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00L11QWYTI50@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 09:22:11 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o1PHM9AB028130 for ; Thu, 25 Feb 2010 17:22:09 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00200QA61E00@fe-emea-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 17:21:56 +0000 (GMT) Received: from [192.168.1.105] (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE001NKQWBTYE0@fe-emea-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 17:21:47 +0000 (GMT) Date: Thu, 25 Feb 2010 17:21:47 +0000 From: Darren J Moffat Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B86ACA4.1030604@sun.com> Sender: Darren.Moffat@sun.com To: John.Fischer@sun.com Cc: PSARC-ext , Matt Keenan , Sarah Jelinek Message-id: <4B86B1AB.6030404@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86ACA4.1030604@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.5) Gecko/20100117 Lightning/1.0b1 Thunderbird/3.0 Status: RO Content-Length: 1891 On 25/02/2010 17:00, John Fischer wrote: > All, > > I am sponsoring this case for Matt Keenan of the installer team. > The case directory contains this proposal. I have set the timer > for next Thursday, March 4th, 2010. > > This project updates the Dwarf Caiman, New Solairs Install GUI > (PSARC/2007/284), to remove the requirement of providing a root > password. Given that the user / password has primary administrator > role, this password is not needed. The Dwarf GUI interface remains > Uncommitted. I'm happy with the changes listed, but I don't feel the project is complete. I would like the case to go slightly further and NOT assign "Primary Administrator" to the default user. It should not be needed and doing so causes problems. The fact that the initial user is given the root role and will have the "Console User" profile when logged in on the console should be sufficient. That profile currently includes the following: Suspend To RAM,Suspend To Disk,Brightness, CPU Power Management,Network Autoconf,Network Wifi Info, Desktop Removable Media User, Desktop Print Management; auths=solaris.system.shutdown Those combined with the fact that programs such as the GUI packagemanger (and others) are executed already via gksu means the user will be prompted for a password (which is actually the root role's password but due to this case it won't mater initially). This gives a very similar behaviour to Ubuntu and to MacOS X. The setting of the initial root password to match that of initial user password is really a workaround for the fact that Solaris roles currently require a role password rather than using the assuming users password. That issue is covered by 6419553 (and possibly others I can't currently find among the 250+ hits I got) - one of the main barriers to changing that was NIS+ which has now been removed. -- Darren J Moffat From Matt.Keenan@Sun.COM Thu Feb 25 09:32:38 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PHWc8s005711 for ; Thu, 25 Feb 2010 09:32:38 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o1PHWaY4059943 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 10:32:38 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE0020NREDSS00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 09:32:37 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00LRBREBTM50@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 09:32:36 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o1PHWYaI007711 for ; Thu, 25 Feb 2010 17:32:35 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00200QTS5100@fe-emea-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 17:32:21 +0000 (GMT) Received: from [129.156.235.244] ([unknown] [129.156.235.244]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE00JKYRDKAAF0@fe-emea-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 17:32:08 +0000 (GMT) Date: Thu, 25 Feb 2010 17:28:30 +0000 From: Matt Keenan Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B86B1AB.6030404@Sun.COM> Sender: Matt.Keenan@Sun.COM To: Darren J Moffat Cc: John.Fischer@Sun.COM, PSARC-ext , Sarah Jelinek , Dave Miner Message-id: <4B86B33E.8070808@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86ACA4.1030604@sun.com> <4B86B1AB.6030404@Sun.COM> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.5) Gecko/20100117 Thunderbird/3.0 Status: RO Content-Length: 2179 Darren, Point taken, however this case is only focusing on the installer UI changes. It does not deal in anyway with the assignment of roles etc. With this regard I believe this case to be complete. regards Matt On 02/25/10 05:21 PM, Darren J Moffat wrote: > On 25/02/2010 17:00, John Fischer wrote: >> All, >> >> I am sponsoring this case for Matt Keenan of the installer team. >> The case directory contains this proposal. I have set the timer >> for next Thursday, March 4th, 2010. >> >> This project updates the Dwarf Caiman, New Solairs Install GUI >> (PSARC/2007/284), to remove the requirement of providing a root >> password. Given that the user / password has primary administrator >> role, this password is not needed. The Dwarf GUI interface remains >> Uncommitted. > > I'm happy with the changes listed, but I don't feel the project is > complete. I would like the case to go slightly further and NOT assign > "Primary Administrator" to the default user. It should not be needed and > doing so causes problems. > > The fact that the initial user is given the root role and will have the > "Console User" profile when logged in on the console should be > sufficient. That profile currently includes the following: > > Suspend To RAM,Suspend To Disk,Brightness, > CPU Power Management,Network Autoconf,Network Wifi Info, > Desktop Removable Media User, > Desktop Print Management; > auths=solaris.system.shutdown > > Those combined with the fact that programs such as the GUI packagemanger > (and others) are executed already via gksu means the user will be > prompted for a password (which is actually the root role's password but > due to this case it won't mater initially). This gives a very similar > behaviour to Ubuntu and to MacOS X. > > The setting of the initial root password to match that of initial user > password is really a workaround for the fact that Solaris roles > currently require a role password rather than using the assuming users > password. That issue is covered by 6419553 (and possibly others I can't > currently find among the 250+ hits I got) - one of the main barriers to > changing that was NIS+ which has now been removed. > > From Darren.Moffat@sun.com Thu Feb 25 10:04:41 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PI4f3i006366 for ; Thu, 25 Feb 2010 10:04:41 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o1PI4b7q026509 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 12:04:40 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE00DC3SVSZ600@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:04:40 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00E6TSVI1L00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:04:31 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o1PI4Uj0009794 for ; Thu, 25 Feb 2010 18:04:30 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00M00SRS3Y00@fe-emea-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 18:04:10 +0000 (GMT) Received: from [192.168.1.105] (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE001ZASUYLE10@fe-emea-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 18:04:10 +0000 (GMT) Date: Thu, 25 Feb 2010 18:04:10 +0000 From: Darren J Moffat Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B86B33E.8070808@sun.com> Sender: Darren.Moffat@sun.com To: Matt Keenan Cc: John.Fischer@sun.com, PSARC-ext , Sarah Jelinek , Dave Miner Message-id: <4B86BB9A.3040903@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86ACA4.1030604@sun.com> <4B86B1AB.6030404@Sun.COM> <4B86B33E.8070808@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.5) Gecko/20100117 Lightning/1.0b1 Thunderbird/3.0 Status: RO Content-Length: 666 On 25/02/2010 17:28, Matt Keenan wrote: > > Darren, > > Point taken, however this case is only focusing on the installer UI > changes. It does not deal in anyway with the assignment of roles etc. > > With this regard I believe this case to be complete. I disagree though. The reason asserted in the case for the change is because the user has "Primary Administrator" profile directly and the root account is made a role. Having the "Primary Administrator" profile assigned directly is not desirable AND it was never ARC'd because it if had been it likely wouldn't have been approved given the "Console User" profile and the use of gksu. -- Darren J Moffat From John.Fischer@sun.com Thu Feb 25 10:33:45 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PIXjRj006479 for ; Thu, 25 Feb 2010 10:33:45 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o1PIWITn019024 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 12:33:44 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE00K0RU7QN200@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:33:26 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00E67U7P1L20@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:33:25 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o1PIXMFj003171 for ; Thu, 25 Feb 2010 18:33:25 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00200U3RN200@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 11:33:22 -0700 (MST) Received: from [192.168.10.8] ([unknown] [76.20.56.122]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE007FZU6RKZB0@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 11:32:51 -0700 (MST) Date: Thu, 25 Feb 2010 10:32:22 -0800 From: John Fischer Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B86BB9A.3040903@Sun.COM> Sender: John.Fischer@sun.com To: Darren J Moffat Cc: Matt Keenan , PSARC-ext , Sarah Jelinek , Dave Miner Reply-to: John.Fischer@sun.com Message-id: <4B86C236.6050009@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86ACA4.1030604@sun.com> <4B86B1AB.6030404@Sun.COM> <4B86B33E.8070808@sun.com> <4B86BB9A.3040903@Sun.COM> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 1001 Darren, So if I am following you correctly.... You are saying that the underlying architecture is flawed thus the current proposal (which assumes that the underlying architecture is correct) is also flawed. Is there a bug (RFE or defect) filed against the architectural issue? Thanks, John On 02/25/10 10:04 AM, Darren J Moffat wrote: > On 25/02/2010 17:28, Matt Keenan wrote: >> >> Darren, >> >> Point taken, however this case is only focusing on the installer UI >> changes. It does not deal in anyway with the assignment of roles etc. >> >> With this regard I believe this case to be complete. > > I disagree though. The reason asserted in the case for the change is > because the user has "Primary Administrator" profile directly and the > root account is made a role. Having the "Primary Administrator" profile > assigned directly is not desirable AND it was never ARC'd because it if > had been it likely wouldn't have been approved given the "Console User" > profile and the use of gksu. > From Sebastien.Roy@sun.com Thu Feb 25 10:59:43 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PIxguE006858 for ; Thu, 25 Feb 2010 10:59:42 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o1PIxfuK005868 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 11:59:42 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE00709VFH9V00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:59:41 -0800 (PST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00LWBVFHTMB0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 10:59:41 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o1PIxfpq021814 for ; Thu, 25 Feb 2010 18:59:41 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00E00TEXGC00@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 11:59:41 -0700 (MST) Received: from [192.168.1.3] ([unknown] [173.76.16.34]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE001EBVEZTO00@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 11:59:24 -0700 (MST) Date: Thu, 25 Feb 2010 13:59:23 -0500 From: Sebastien Roy Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B86C236.6050009@sun.com> Sender: Sebastien.Roy@sun.com To: John.Fischer@sun.com Cc: Darren J Moffat , Dave Miner , PSARC-ext , Matt Keenan Message-id: <4B86C88B.6000705@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86ACA4.1030604@sun.com> <4B86B1AB.6030404@Sun.COM> <4B86B33E.8070808@sun.com> <4B86BB9A.3040903@Sun.COM> <4B86C236.6050009@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 683 On 02/25/10 01:32 PM, John Fischer wrote: > Darren, > > So if I am following you correctly.... You are saying that the > underlying architecture is flawed thus the current proposal (which > assumes that the underlying architecture is correct) is also flawed. > Is there a bug (RFE or defect) filed against the architectural > issue? Indeed there is: http://defect.opensolaris.org/bz/show_bug.cgi?id=4885 I believe the install team acknowledges that this is a problem and have stated that this will be fixed (perhaps Dave Miner can confirm). As such, I would agree with Darren that this case seems to be going astray of the overall direction of the install architecture. -Seb From Glenn.Faden@sun.com Thu Feb 25 12:30:50 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PKUopN008433 for ; Thu, 25 Feb 2010 12:30:50 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o1PKUokL010119 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 14:30:50 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE00115ZNE9K00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 12:30:50 -0800 (PST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00E6SZNC1W90@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 12:30:48 -0800 (PST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o1PKUm60000930 for ; Thu, 25 Feb 2010 12:30:48 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00H00ZDX8A00@fe-sfbay-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 12:30:48 -0800 (PST) Received: from vpn-129-150-218-4.central.sun.com ([unknown] [129.150.218.4]) by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE0025CZNBEAI0@fe-sfbay-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 12:30:48 -0800 (PST) Date: Thu, 25 Feb 2010 12:30:46 -0800 From: Glenn Faden Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification Sender: Glenn.Faden@sun.com To: Sebastien.Roy@sun.com Cc: John Fischer , Darren J Moffat , Dave Miner , PSARC-ext , Matt Keenan Message-id: <4B86DDF6.3090400@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Status: RO Content-Length: 720 Since this case makes it mandatory that root is a role, it should also make it mandatory to assume the root role in order to get a root shell. The current behavior, whereby the user can get a root shell by typing "pfexec bash" is a serious security flaw, and is inconsistent with the RBAC implementation in Solaris. For example, such a sequence could be embedded in any script which the user might execute, thereby becoming root without the user's intent. So I agree with Darren that this case is incomplete, unless it also undoes the assignment of the Primary Administrator rights profile to the initial user. IMHO, it would never have been approved if it had been requested through the ARC process. --Glenn From Dave.Miner@sun.com Thu Feb 25 12:37:53 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PKbqi8008659 for ; Thu, 25 Feb 2010 12:37:53 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o1PKbprZ016151 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 25 Feb 2010 13:37:52 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYE00C09ZZ4YK00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 12:37:52 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYE00CFAZZ3MD00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 12:37:51 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o1PKbp9n027442 for ; Thu, 25 Feb 2010 20:37:51 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYE00J00ZJ92700@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 13:37:51 -0700 (MST) Received: from [129.148.174.93] ([unknown] [129.148.174.93]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYE00HGGZZ1IQG0@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 25 Feb 2010 13:37:49 -0700 (MST) Date: Thu, 25 Feb 2010 15:37:49 -0500 From: Dave Miner Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B86C88B.6000705@sun.com> Sender: Dave.Miner@sun.com To: Sebastien Roy Cc: John.Fischer@sun.com, Darren J Moffat , PSARC-ext , Matt Keenan Message-id: <4B86DF9D.2040809@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86ACA4.1030604@sun.com> <4B86B1AB.6030404@Sun.COM> <4B86B33E.8070808@sun.com> <4B86BB9A.3040903@Sun.COM> <4B86C236.6050009@sun.com> <4B86C88B.6000705@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 888 On 02/25/10 01:59 PM, Sebastien Roy wrote: > On 02/25/10 01:32 PM, John Fischer wrote: >> Darren, >> >> So if I am following you correctly.... You are saying that the >> underlying architecture is flawed thus the current proposal (which >> assumes that the underlying architecture is correct) is also flawed. >> Is there a bug (RFE or defect) filed against the architectural >> issue? > > Indeed there is: > > http://defect.opensolaris.org/bz/show_bug.cgi?id=4885 > > I believe the install team acknowledges that this is a problem and have > stated that this will be fixed (perhaps Dave Miner can confirm). As > such, I would agree with Darren that this case seems to be going astray > of the overall direction of the install architecture. > The intention is to fix the bug. I would suggest that the case be amended to reflect that Primary Administrator will not be configured. Dave From casper@holland.sun.com Fri Feb 26 01:44:23 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1Q9iNZQ008029 for ; Fri, 26 Feb 2010 01:44:23 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o1Q9iMwC058638 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Fri, 26 Feb 2010 02:44:23 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYG00K0H0DY0D00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 26 Feb 2010 01:44:22 -0800 (PST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYG009JZ0DWGE90@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Fri, 26 Feb 2010 01:44:20 -0800 (PST) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o1Q9iFK8025905; Fri, 26 Feb 2010 09:44:15 +0000 (GMT) Date: Fri, 26 Feb 2010 10:44:15 +0100 From: Casper.Dik@sun.com Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B86DDF6.3090400@sun.com> Sender: casper@holland.sun.com To: Glenn Faden Cc: Sebastien.Roy@sun.com, John Fischer , Darren J Moffat , Dave Miner , PSARC-ext , Matt Keenan Message-id: <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> Status: RO Content-Length: 1011 >Since this case makes it mandatory that root is a role, it should also >make it mandatory to assume the root role in order to get a root shell. >The current behavior, whereby the user can get a root shell by typing >"pfexec bash" is a serious security flaw, and is inconsistent with the >RBAC implementation in Solaris. For example, such a sequence could be >embedded in any script which the user might execute, thereby becoming >root without the user's intent. > >So I agree with Darren that this case is incomplete, unless it also >undoes the assignment of the Primary Administrator rights profile to the >initial user. IMHO, it would never have been approved if it had been >requested through the ARC process. Indeed; the new implementation of "in-kernel pfexec" makes this very clear; a user with a "Primary Administrator" as their profile, will get a "root" prompt when executing a pf*sh*. (That's because the in-kernel pfexec executes a profile shell as if it is executed by pfexec) Casper From John.Fischer@Sun.COM Fri Feb 26 13:55:47 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1QLtl7L019705 for ; Fri, 26 Feb 2010 13:55:47 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o1QLtluT005596 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 26 Feb 2010 15:55:47 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYG00601Y8YFK00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Fri, 26 Feb 2010 13:55:46 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYG0015GY8YMO50@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Fri, 26 Feb 2010 13:55:46 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o1QLtkts016203 for ; Fri, 26 Feb 2010 21:55:46 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYG00H00X6GUT00@mail-amer.sun.com> for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Fri, 26 Feb 2010 14:55:45 -0700 (MST) Received: from [192.168.10.8] ([unknown] [76.20.56.122]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYG00M3AY8X8FD0@mail-amer.sun.com> for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Fri, 26 Feb 2010 14:55:45 -0700 (MST) Date: Fri, 26 Feb 2010 13:55:15 -0800 From: John Fischer Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> Sender: John.Fischer@Sun.COM To: PSARC-ext Cc: Matt Keenan Reply-to: John.Fischer@Sun.COM Message-id: <4B884343.3080102@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_umZLNfnG8pGv5ykxeP2RsQ)" X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 4770 This is a multi-part message in MIME format. --Boundary_(ID_umZLNfnG8pGv5ykxeP2RsQ) Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT All, Attached is the updated proposal which is also archived (diff below). The modification is to remove the Primary Administrator rights from the user at install time. Thanks, John *** proposal.txt.orig Thu Feb 25 08:53:52 2010 --- proposal.txt Fri Feb 26 13:52:00 2010 *************** *** 13,19 **** 2.1. Project Description: Updates Users screen of Solaris GUI installer. ! The proposed updates are in response to Bug 1436 [1]. 4. Technical Description: 4.1. Details: --- 13,19 ---- 2.1. Project Description: Updates Users screen of Solaris GUI installer. ! The proposed updates are in response to Bug 1436 [1] and 4885 [4] 4. Technical Description: 4.1. Details: *************** *** 25,30 **** --- 25,33 ---- - Entry of users login name and password is now mandatory. - Default root password is set to initial login password specified here. + This case also implement the removal or Primary Administrator privileges for + the initial user created. See [4] + 4.2. Interfaces: Exported Interfaces Stability Comments *************** *** 59,61 **** --- 62,66 ---- [3] UIRB/2007/264 Dwarf Caiman UIRB Review Materials http://sac.sfbay/Archives/CaseLog/rb/UIRB/2007/264/ + [4] User created by installer gets unsafe profile "Primary Administrator" + http://defect.opensolaris.org/bz/show_bug.cgi?id=4885 On 02/26/10 01:44 AM, Casper.Dik@Sun.COM wrote: > >> Since this case makes it mandatory that root is a role, it should also >> make it mandatory to assume the root role in order to get a root shell. >> The current behavior, whereby the user can get a root shell by typing >> "pfexec bash" is a serious security flaw, and is inconsistent with the >> RBAC implementation in Solaris. For example, such a sequence could be >> embedded in any script which the user might execute, thereby becoming >> root without the user's intent. >> >> So I agree with Darren that this case is incomplete, unless it also >> undoes the assignment of the Primary Administrator rights profile to the >> initial user. IMHO, it would never have been approved if it had been >> requested through the ARC process. > > Indeed; the new implementation of "in-kernel pfexec" makes this > very clear; a user with a "Primary Administrator" as their profile, > will get a "root" prompt when executing a pf*sh*. (That's because > the in-kernel pfexec executes a profile shell as if it is executed > by pfexec) > > Casper > --Boundary_(ID_umZLNfnG8pGv5ykxeP2RsQ) Content-type: text/plain; name=proposal.txt Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=proposal.txt 1. Introduction 1.1. Project/Component Working Name: Solaris GUI Install Users Screen Modification 1.2. Name of Document Author/Supplier: Matt Keenan 1.3. Date of This Document: 02/24/2010 2. Project Summary 2.1. Project Description: Updates Users screen of Solaris GUI installer. The proposed updates are in response to Bug 1436 [1] and 4885 [4] 4. Technical Description: 4.1. Details: The following updates are being carried out to the Users Screen of the Solaris Instaler - Remove both Root Password entry fields. - Entry of users login name and password is now mandatory. - Default root password is set to initial login password specified here. This case also implement the removal or Primary Administrator privileges for the initial user created. See [4] 4.2. Interfaces: Exported Interfaces Stability Comments ----------------------- -------------------- ------------- Dwarf GUI Uncommitted See [2] 4.3. Doc Impact: Installer inline help 4.4. Packaging & Delivery: SUNWgui-install 4.5. Dependencies: 4.6. L10N Impact: N/A 4.7. Security Impact: N/A 5. Reference Documents: [1] Installation does not need to ask Root Password http://defect.opensolaris.org/bz/show_bug.cgi?id=1436 [2] PSARC/2007/284 Dwarf Caiman, New Solairs Install GUI http://sac.sfbay/PSARC/2007/284/ [3] UIRB/2007/264 Dwarf Caiman UIRB Review Materials http://sac.sfbay/Archives/CaseLog/rb/UIRB/2007/264/ [4] User created by installer gets unsafe profile "Primary Administrator" http://defect.opensolaris.org/bz/show_bug.cgi?id=4885 --Boundary_(ID_umZLNfnG8pGv5ykxeP2RsQ)-- From Sebastien.Roy@sun.com Wed Mar 3 07:53:49 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o23Frn3b023371 for ; Wed, 3 Mar 2010 07:53:49 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o23Frmqr014823 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 3 Mar 2010 07:53:48 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYP00213QTO1F00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Wed, 03 Mar 2010 08:53:48 -0700 (MST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYP00CVXQTNJU80@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.Com); Wed, 03 Mar 2010 08:53:47 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o23FrlTC009826 for ; Wed, 03 Mar 2010 15:53:47 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYP00600PKMIZ00@mail-amer.sun.com> for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Wed, 03 Mar 2010 08:53:47 -0700 (MST) Received: from [129.148.174.103] ([unknown] [129.148.174.103]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYP003B9QTHGZD0@mail-amer.sun.com> for PSARC-ext@Sun.Com (ORCPT PSARC-ext@Sun.Com); Wed, 03 Mar 2010 08:53:41 -0700 (MST) Date: Wed, 03 Mar 2010 10:50:59 -0500 From: Sebastien Roy Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B884343.3080102@sun.com> Sender: Sebastien.Roy@sun.com To: John.Fischer@sun.com Cc: PSARC-ext , Matt Keenan Message-id: <4B8E8563.1040600@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> <4B884343.3080102@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 591 On 02/26/10 04:55 PM, John Fischer wrote: > Attached is the updated proposal which is also archived (diff below). > The modification is to remove the Primary Administrator rights from > the user at install time. PSARC 2010/067 has included this in its scope (see 2.2.3 of that case's spec). One potential resolution would be to revert this case to what was initially proposed and add a case dependency on 2010/067. Please get together with the project team for 2010/067 and come up with some solution. I don't believe that two cases claiming to do the same thing makes sense. -Seb From John.Fischer@Sun.COM Wed Mar 3 11:45:06 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o23Jj6L7005011 for ; Wed, 3 Mar 2010 11:45:06 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o23Jj3QJ023225 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 3 Mar 2010 11:45:05 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYQ0070V1J5FQ00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 11:45:05 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYQ00G0F1J3FY40@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 11:45:03 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o23Jj3uh012339 for ; Wed, 03 Mar 2010 19:45:03 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYP00A00Z92NG00@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 12:45:03 -0700 (MST) Received: from [192.168.10.8] ([unknown] [76.20.56.122]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYQ003GN1IEZ210@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 12:44:39 -0700 (MST) Date: Wed, 03 Mar 2010 11:44:06 -0800 From: John Fischer Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B8E8563.1040600@sun.com> Sender: John.Fischer@Sun.COM To: Sebastien Roy Cc: PSARC-ext , Matt Keenan Reply-to: John.Fischer@Sun.COM Message-id: <4B8EBC06.1050109@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> <4B884343.3080102@sun.com> <4B8E8563.1040600@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091124) Status: RO Content-Length: 1066 Matt, I have extended the timer to Friday and will continue to move it as needed until Sebastien's issue is addressed. Having this case dependent upon 2010/067 case seems reasonable to me. The relevant subsection is 2.2.3 -- Preconfigured administrative accounts: http://sac.eng/arc/PSARC/2010/067/materials/d-interim-case.html#id22 Please let us know if this dependency seems reasonable to you as well. Thanks, John Sebastien Roy wrote: > On 02/26/10 04:55 PM, John Fischer wrote: >> Attached is the updated proposal which is also archived (diff below). >> The modification is to remove the Primary Administrator rights from >> the user at install time. > > PSARC 2010/067 has included this in its scope (see 2.2.3 of that case's > spec). One potential resolution would be to revert this case to what > was initially proposed and add a case dependency on 2010/067. Please > get together with the project team for 2010/067 and come up with some > solution. I don't believe that two cases claiming to do the same thing > makes sense. > > -Seb From Matt.Keenan@Sun.COM Wed Mar 3 13:54:27 2010 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o23LsRUo007880 for ; Wed, 3 Mar 2010 13:54:27 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o23LsRer020338 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 3 Mar 2010 13:54:27 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYQ00G017IR1E00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 13:54:27 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYQ00GD37IQFSC0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 13:54:27 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o23LsQvT026889 for ; Wed, 03 Mar 2010 21:54:26 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYQ00A007HRKD00@fe-emea-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 21:54:18 +0000 (GMT) Received: from [192.168.1.12] ([unknown] [213.94.249.121]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYQ007TX7IE6CA0@fe-emea-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 21:54:17 +0000 (GMT) Date: Wed, 03 Mar 2010 21:54:11 +0000 From: Matt Keenan Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B8EBC06.1050109@sun.com> Sender: Matt.Keenan@Sun.COM To: John.Fischer@Sun.COM Cc: Sebastien Roy , PSARC-ext Message-id: <4B8EDA83.8060205@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> <4B884343.3080102@sun.com> <4B8E8563.1040600@sun.com> <4B8EBC06.1050109@sun.com> User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) Status: RO Content-Length: 1320 John, I agree with making this case dependent on 2010/067, once it has been reviewed/approved we can implement the required resolution within the install space if necessary. regards Matt John Fischer wrote: > Matt, > > I have extended the timer to Friday and will continue to move it as > needed until Sebastien's issue is addressed. > > Having this case dependent upon 2010/067 case seems reasonable to me. > The relevant subsection is 2.2.3 -- Preconfigured administrative > accounts: > > http://sac.eng/arc/PSARC/2010/067/materials/d-interim-case.html#id22 > > Please let us know if this dependency seems reasonable to you as well. > > Thanks, > > John > > > Sebastien Roy wrote: >> On 02/26/10 04:55 PM, John Fischer wrote: >>> Attached is the updated proposal which is also archived (diff below). >>> The modification is to remove the Primary Administrator rights from >>> the user at install time. >> >> PSARC 2010/067 has included this in its scope (see 2.2.3 of that >> case's spec). One potential resolution would be to revert this case >> to what was initially proposed and add a case dependency on >> 2010/067. Please get together with the project team for 2010/067 and >> come up with some solution. I don't believe that two cases claiming >> to do the same thing makes sense. >> >> -Seb From Sebastien.Roy@Sun.COM Wed Mar 3 13:57:58 2010 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o23LvwCT007997 for ; Wed, 3 Mar 2010 13:57:58 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o23LvwhL021825 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 3 Mar 2010 13:57:58 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYQ00H057OM3N00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 13:57:58 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYQ0098V7OLS2B0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 13:57:57 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o23LvvNQ015600 for ; Wed, 03 Mar 2010 21:57:57 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYQ00A006WI8R00@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 14:57:57 -0700 (MST) Received: from [129.148.174.103] ([unknown] [129.148.174.103]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYQ007CZ7NJJN70@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 03 Mar 2010 14:57:20 -0700 (MST) Date: Wed, 03 Mar 2010 16:54:36 -0500 From: Sebastien Roy Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B8EDA83.8060205@sun.com> Sender: Sebastien.Roy@Sun.COM To: Matt Keenan Cc: John.Fischer@Sun.COM, PSARC-ext Message-id: <4B8EDA9C.2030104@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> <4B884343.3080102@sun.com> <4B8E8563.1040600@sun.com> <4B8EBC06.1050109@sun.com> <4B8EDA83.8060205@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 322 On 03/ 3/10 04:54 PM, Matt Keenan wrote: > I agree with making this case dependent on 2010/067, once it has been > reviewed/approved we can implement the required resolution within the > install space if necessary. Great, +1 on the case given the original proposal with an amendment to have it depend on 2010/067. -Seb From John.Fischer@Sun.COM Mon Mar 8 12:37:29 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o28KbTMx009336 for ; Mon, 8 Mar 2010 12:37:29 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o28KbTbY050877 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 8 Mar 2010 13:37:29 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYZ0030ZDAHT900@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 08 Mar 2010 13:37:29 -0700 (MST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYZ00BC2DAGM580@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 08 Mar 2010 13:37:28 -0700 (MST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o28KbStu020508 for ; Mon, 08 Mar 2010 20:37:28 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYZ00M00CPFI200@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 08 Mar 2010 13:37:28 -0700 (MST) Received: from [192.168.10.8] ([unknown] [76.20.56.122]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYZ00LITDAFIME0@mail-amer.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 08 Mar 2010 13:37:27 -0700 (MST) Date: Mon, 08 Mar 2010 12:36:53 -0800 From: John Fischer Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B8EDA9C.2030104@sun.com> Sender: John.Fischer@Sun.COM To: PSARC-ext Cc: Matt Keenan Reply-to: John.Fischer@Sun.COM Message-id: <4B955FE5.7050608@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> <4B884343.3080102@sun.com> <4B8E8563.1040600@sun.com> <4B8EBC06.1050109@sun.com> <4B8EDA83.8060205@sun.com> <4B8EDA9C.2030104@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 559 All, Having the required +1, modifying the proposal to reflect the dependency on 2010/069 and having reached the new timer I have marked this case closed approved. Thanks, John On 03/ 3/10 01:54 PM, Sebastien Roy wrote: > On 03/ 3/10 04:54 PM, Matt Keenan wrote: >> I agree with making this case dependent on 2010/067, once it has been >> reviewed/approved we can implement the required resolution within the >> install space if necessary. > > Great, +1 on the case given the original proposal with an amendment to > have it depend on 2010/067. > > -Seb From John.Fischer@sun.com Mon Mar 8 13:20:15 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o28LKEh9010895 for ; Mon, 8 Mar 2010 13:20:14 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o28LK8Wn001810 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 8 Mar 2010 15:20:14 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYZ0060PF9Q7S00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Mon, 08 Mar 2010 13:20:14 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYZ00FBFF9P8ZE0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Mon, 08 Mar 2010 13:20:13 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o28LKDhe018751 for ; Mon, 08 Mar 2010 21:20:13 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYZ00600DMMG500@mail-amer.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 08 Mar 2010 14:20:13 -0700 (MST) Received: from [192.168.10.8] ([unknown] [76.20.56.122]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYZ009EEF9DPE70@mail-amer.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Mon, 08 Mar 2010 14:20:01 -0700 (MST) Date: Mon, 08 Mar 2010 13:19:27 -0800 From: John Fischer Subject: Re: PSARC/2010/069 - Solaris GUI Install Users Screen Modification In-reply-to: <4B955FE5.7050608@sun.com> Sender: John.Fischer@sun.com Cc: PSARC-ext , Matt Keenan Reply-to: John.Fischer@sun.com Message-id: <4B9569DF.7010500@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <4B86DDF6.3090400@sun.com> <201002260944.o1Q9iFK8025905@dm-holland-02.uk.sun.com> <4B884343.3080102@sun.com> <4B8E8563.1040600@sun.com> <4B8EBC06.1050109@sun.com> <4B8EDA83.8060205@sun.com> <4B8EDA9C.2030104@sun.com> <4B955FE5.7050608@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.7) Gecko/20100131 Lightning/1.0b1 Thunderbird/3.0.1 Status: RO Content-Length: 790 The dependency is 2010/067 and not 2010/069. On 03/ 8/10 12:36 PM, John Fischer wrote: > All, > > Having the required +1, modifying the proposal to reflect the > dependency on 2010/069 and having reached the new timer I have > marked this case closed approved. > > Thanks, > > John > > > On 03/ 3/10 01:54 PM, Sebastien Roy wrote: >> On 03/ 3/10 04:54 PM, Matt Keenan wrote: >>> I agree with making this case dependent on 2010/067, once it has been >>> reviewed/approved we can implement the required resolution within the >>> install space if necessary. >> >> Great, +1 on the case given the original proposal with an amendment to >> have it depend on 2010/067. >> >> -Seb > _______________________________________________ > opensolaris-arc mailing list > opensolaris-arc@opensolaris.org