From gjelinek@sac.sfbay.sun.com Mon Jul 26 06:20:00 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6QDK0On012351 for ; Mon, 26 Jul 2010 06:20:00 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o6QDJx44008365; Mon, 26 Jul 2010 08:19:59 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L66006192DBZU00@nwk-avmta-1.sfbay.Sun.COM>; Mon, 26 Jul 2010 06:19:59 -0700 (PDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6600DWJ2DAS830@nwk-avmta-1.sfbay.Sun.COM>; Mon, 26 Jul 2010 06:19:58 -0700 (PDT) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [10.5.240.67]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o6QDJw8W027459; Mon, 26 Jul 2010 06:19:58 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6QDJwMS012346; Mon, 26 Jul 2010 06:19:58 -0700 (PDT) Received: (from gjelinek@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id o6QDJvZK012342; Mon, 26 Jul 2010 06:19:57 -0700 (PDT) Date: Mon, 26 Jul 2010 06:19:57 -0700 (PDT) From: Gerald Jelinek Subject: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] To: PSARC-ext@sun.com Cc: jerry.jelinek@oracle.com, stephen.lawrence@oracle.com Message-id: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 12605 I'm sponsoring this case for Steve Lawrence. I've placed copies of the new man pages in the case directory. Thanks, Jerry Template Version: @(#)sac_nextcase 1.70 03/30/10 SMI This information is Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. 1. Introduction 1.1. Project/Component Working Name: zonestat 1.2. Name of Document Author/Supplier: Author: Stephen Lawrence 1.3 Date of This Document: 26 July, 2010 4. Technical Description zonestat Command for Zones Cpu and Memory Observability SUMMARY This fast-track proposes the addition of a command line tool to facilitate the observation of system resources consumed by Solaris Zones. The tool is specifically designed to observe the following: 1. Memory and cpu utilization of zones. 2. Utilization of resource control limits. 3. Resource utilization versus physical resources and versus configured limits. 4. Various cpu-related resource partitioning schemes, such as processor sets, pools, fair share scheduler, and cpu-caps. 5. Total utilization and the per-zone break-down. 6. Aggregate, average, and peak utilization over specified time periods. This case seeks patch binding. PROBLEM: Solaris zones are tightly integrated with many Solaris resource management features, but deciphering the configuration and utilization is no small feat. An administrator must make use of many commands in pursuit of this information, such as: zoneadm(1m), pooladm(1m), poolstat(1), prctl(1m), prstat(1), priocntl(1m), rcapstat(1m). The user must essentially follow the trail of crumbs to re-construct the configuration and compute the utilization. The opensolaris community has developed a zonestat script for monitoring zones, which makes use of the existing commands. This is an excellent example of the kind of tool needed, and is used by administrators for its intended purpose. It is also an example of the hoops users must jump through to collection zone resource utilization data. Also, this tool suffers from the shortcomings of the existing Solaris commands. Many commands must be invoked and tied together, and some information is not readily available at all. For example, the most commonly used tool to observe zone cpu utilization is prstat -Z. prstat polls /proc, and will not account for cpu used by short-lived processes. The individual problems in reconstructing the configuration and utilization are as follows: 1. Each zone must be mapped to its configured limits. 2. If processor sets are in use, each zone must be mapped to the processor sets to which it has processes bound. 3. Memory utilization is available via a private system call (getvmusage()), which is expensive to invoke. 4. Cpu utilization must be collected via extended accounting, which requires privilege to configure. The extended accounting log must also be managed. Extended accounting must be used to compute the cpu utilization because it will contain all data associated with processes which have exited. 5. In the case of fair share scheduling, zones sharing processors must be tallied to compute relative share. PROPOSAL: This case proposes solving these problems by implementing: 1. A zones monitoring daemon: zonestatd(1m) A new smf service svc:/system/zones-monitoring:default will execute a zones monitoring daemon. This daemon will implement monitoring the system configuration, managing extended accounting, and computing memory utilization on behalf of clients. zonestatd will respond to local connections (from both the global and non-global zones) via a door, and provide the current configuration and utilization data on request. zonestatd will run only in the global zone. The daemon binary and service will not be delivered to non-global zones. In order to minimize system performance impact, zonestatd will only compute utilization data when there is a client request. Cpu utilization will be collected over the lifespan of clients at a regular interval, in order to keep cpu utilization charged correctly, and to keep the extended accounting logs from accumulating. The calculation of memory data will be throttled by the same interval. This interval will be configurable vi the "config/sample_interval" property on the zones-monitoring SMF service. When contacted from a non-global zone, zonestatd will provide filtered utilization data. Since, in reality, each zone shares resources with other zones, each zone will see the total resource utilization, its resource utilization, and the resource consumption by "everything else". Example of the zstat(1m) command (described below) invoked from a non-global zone. All resource usage by the kernel and other zones is reported as [system]: # zonestat -r physical-memory PHYSICAL-MEMORY SYSTEM-MEMORY mem_default 2046M ZONE USED PCT CAP %CAP [total] 725M 35% - - [system] 408M 19% - - myzone 317M 15% - - Reporting total resource and usage within a non-global zone may be considered a security issue. However this information is available today via the existing kstats and kstat-related commands such as vmstat and mpstat when used from within a non-global zone. The value in reporting this information is to allow the non-global zone user to observe the true quantity of resource which is currently available. Without such information, they may attempt to overuse resources, leading to performance degradation. See also the attached zonestatd(1m) man page. 2. A zones monitoring library: libzonestat.so(3lib) The library will implement connecting to zonestatd and fetching the current utilization data. It will also implement the various usage calculations, and provide utility functions to facilitate comparing utilization data over intervals. This library will be private, and only consumed by the following command described below. A future case may propose making the library public (committed) for external consumption by programmatic clients. 3. A zones monitoring CLI: zonestat(1). The zonestat command will invoke the monitoring library to fetch the current utilization data and report it in both human readable and machine parseable formats. The command output is a multi-line report, showing each system resource, the aggregate utilization, system utilization, and per-zone utilization. The zonestat command invocation is as follows: zonestat [-z zonelist] [-r reslist] [-n namelist] [-T u | d | i] [-R reports] [-q] [-p [-P lines]] [-S cols] interval [duration [report]] zonestat uses "interval count" style operands, similar to the existing *stat commands. A third "report" argument can be added to allow users to get summary information at a chosen interval. The operands can also be specified as duration in seconds instead of as counts. My default, the zstat(1) command will report a summary of cpu, physical-memory, and virtual-memory utilization. More details resource-specific views are reported when specific resources are requested. The CLI options provide filtering based on zone and resource, and sorting based on usage and configured limits. Parseable output and timestamps can also be specified. See the attached zonestat(1) man page for a detailed description of the CLI invocation and output. Example 1: Summary of cpu and memory usage over a 5 second interval: # zonestat 5 1 SUMMARY -----CPU------------- ----PHYSICAL--- ----VIRTUAL---- ZONE USED %PART %CAP %SHRU USED PCT %CAP USED PCT %CAP [total] 9.74 30% - - 7576M 23% - 11.6G 24% - [system] 0.28 0.8% - - 6535M 19% - 10.4G 21% - global 9.10 28% - - 272M 0.8% - 366M 0.7% - kodiak-ab 0.32 1.0% - - 256M 0.7% - 265M 0.5% - kodiak-dp 0.00 0.0% - - 77.6M 0.2% - 71.1M 0.1% - kodiak-gjelinek 0.00 0.0% - - 58.7M 0.1% - 59.3M 0.1% - kodiak-edp 0.00 0.0% - - 53.0M 0.1% - 58.9M 0.1% - kodiak-johnlev 0.00 0.0% - - 51.9M 0.1% - 57.4M 0.1% - kodiak-jordan 0.00 0.0% - - 51.7M 0.1% - 56.8M 0.1% - kodiak-steve 0.00 0.0% - - 51.5M 0.1% - 56.2M 0.1% - kodiak-susan 0.00 0.0% - - 48.9M 0.1% - 55.7M 0.1% - kodiak-batschul 0.00 0.0% - - 48.5M 0.1% - 49.5M 0.1% - kodiak-garypen 0.00 0.0% - - 46.3M 0.1% - 49.5M 0.1% - kodiak-rie 0.00 0.0% - - 22.7M 0.0% - 49.4M 0.1% - Example 2: Detailed usage of the default pset over a 4 second interval: # zonestat -n default-pset 5 1 Collecting data for first interval... Interval: 1, Duration: 0:00:01 PROCESSOR-SET TYPE ONLINE/CPUS MIN/MAX pset_default default-pset 1/1 1/- ZONE USED %PCT CAP %CAP SHRS %SHR %SHRU [total] 0.02 2.3% - - 2 - - [system] 0.00 0.4% - - - - - global 0.01 1.4% - - 1 50% 2.8% foo 0.00 0.1% - - 1 50% 0.3% aaa 0.00 0.1% - - no-fss - - In this example, the quantity of cpus in the default pset are listed, followed by the utilization. It can be seen that the zones are using cpu shares, although zone "aaa" is not configured to use the fair share scheduler. This is likely a mis-configuration that the admin will need to address. Example 3: Usage reports over a 24 hour period: Sample usage every 30 seconds for 24 hours, and produce machine parseable high and average usage reports for each hour: # zonestat -p -r memory -q -R average,high 30s 24h 1h In order to generate reports, the zonestat command will match zones and processor sets by name. This means if a zone is booted and halted a number of times during the life of a zonestat invocation, the utilization will be aggregated using the zone's name, even though they id of the zone (and possibly the processor set) will change. If a zone or pset is renamed, it will appear twice in the report, once as each name. EXPORTED INTERFACES Interface Classification ---------------------------------------------------------------- zonestat(1) invocation Committed zonestat(1) parseable output Committed zonestat(1) human-readable output Uncommitted libzonestat.so.1 Consolidation Private zonestatd(1m) Consolidation Private svc:/system/zones-monitoring:default Consolidation Private config/sample_interval Committed. /var/run/zones/zonestat_door Consolidation Private IMPORTED INTERFACES Interface Classification ----------------------------------------------- /proc/psinfo Committed libexacct.so Committed libkstat.so Committed libpool.so Committed pset_info(2) Committed getrctl(2) Committed acctctl(2) Consolidation Private swapctl(2) Consolidation Private getvmusage(2) Consolidation Private zone_lockedmem(kstat) Consolidation Private zone_swapresv(kstat) Consolidation Private REFERENCES [1] PSARC/2002/174 Virtualization and Namespace Isolation in Solaris [2] PSARC/2006/496 Improved Zones/RM Integration [3] PSARC/2004/402 CPU Caps [4] PSARC/2006/598 Swap resource control; locked memory RM improvements [5] PSARC/2000/136 Administrative support for processor sets and extensions [6] PSARC/2000/452 Revised Share Scheduler (2000/452) [7] OpenSolaris Project: Zones Statistics http://hub.opensolaris.org/bin/view/Project+zonestat/WebHome 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Darren.Moffat@oracle.com Tue Jul 27 08:15:06 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6RFF6Oe010840 for ; Tue, 27 Jul 2010 08:15:06 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o6RFF3e7056254 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 27 Jul 2010 09:15:06 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L680000J2D53U00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 08:15:05 -0700 (PDT) Received: from sca-ea-mail-1.sun.com ([192.18.43.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6800LZN2D59420@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 08:15:05 -0700 (PDT) Received: from rcsinet13.oracle.com (rcsinet13.oracle.com [148.87.113.125]) by sca-ea-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o6RFExEb019010; Tue, 27 Jul 2010 15:15:00 +0000 (GMT) Received: from acsmt353.oracle.com (acsmt353.oracle.com [141.146.40.153]) by rcsinet13.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o6R3tQmc016584; Tue, 27 Jul 2010 15:14:58 +0000 (GMT) Received: from abhmt012.oracle.com by acsmt353.oracle.com with ESMTP id 440884951280243681; Tue, 27 Jul 2010 08:14:41 -0700 Received: from [10.7.251.221] (/10.7.251.221) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 27 Jul 2010 08:14:40 -0700 Date: Mon, 26 Jul 2010 15:36:40 +0100 From: Darren J Moffat Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> To: Gerald Jelinek Cc: PSARC-ext@sun.com, jerry.jelinek@oracle.com, stephen.lawrence@oracle.com Message-id: <4C4D9D78.2010300@Oracle.COM> Organization: Oracle Solaris Security MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt353.oracle.com [141.146.40.153] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090204.4C4EF7F3.01A5:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 OracleBeehiveExtension/1.0.0.0pre3 Thunderbird/3.0.4 Status: RO Content-Length: 812 DJM-1 zonestatd What is the SMF method script used to start zonestatd ? ie what uid/gid and privileges does it run with ? What is the RBAC authorisation used for managing the SMF service state and the config value changes ? DJM-2 what method is used to ensure that zonestatd doesn't return information about other ngz's when zonestat is run from an ngz ? DJM-3 Can zonestat(1) run as an normal user (ie with no privileges other than basic and no additional RBAC authorisations other than those granted by Basic Solaris User) ? If so is there any information that user can get that they can't through existing commands ? DJM-4 I assume this works in a TX zone configuration DJM-5 I don't see how the FMRI can be Consolidation Private if the config/sample_internal is Committed. -- Darren J Moffat From stephen.lawrence@oracle.com Tue Jul 27 09:20:18 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6RGKI5a012123 for ; Tue, 27 Jul 2010 09:20:18 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o6RGKFt4005686 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 27 Jul 2010 11:20:17 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L68003195DT0T00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:20:17 -0700 (PDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6800LGG5DS8Q60@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:20:17 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o6RGKFZA017515; Tue, 27 Jul 2010 16:20:16 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o6RGJZ3u000377; Tue, 27 Jul 2010 16:19:38 +0000 (GMT) Received: from abhmt003.oracle.com by acsmt353.oracle.com with ESMTP id 461677921280247559; Tue, 27 Jul 2010 09:19:19 -0700 Received: from [129.146.224.51] (/129.146.224.51) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 27 Jul 2010 09:19:18 -0700 Date: Tue, 27 Jul 2010 09:19:17 -0700 From: Steve Lawrence Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <4C4D9D78.2010300@Oracle.COM> To: Darren J Moffat Cc: Gerald Jelinek , PSARC-ext@sun.com, jerry.jelinek@oracle.com Message-id: <4C4F0705.70404@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090201.4C4F072F.0174:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> <4C4D9D78.2010300@Oracle.COM> User-Agent: Thunderbird 2.0.0.21 (X11/20090323) Status: RO Content-Length: 2192 Hey Darren, Thanks for reviewing this. Responses in-line below. Darren J Moffat wrote: > DJM-1 zonestatd > > What is the SMF method script used to start zonestatd ? ie what > uid/gid and privileges does it run with ? /lib/svc/method/svc-zstat I'll add that to the interface table. It runs as uid/gid 0. I'll work out which privileges are needed so I can drop the rest. > What is the RBAC authorisation used for managing the SMF service state > and the config value changes ? I should use solaris.zones.manage > > DJM-2 what method is used to ensure that zonestatd doesn't return > information about other ngz's when zonestat is run from an ngz ? The zoneid from the door cred. > > DJM-3 Can zonestat(1) run as an normal user (ie with no privileges > other than basic and no additional RBAC authorisations other than > those granted by Basic Solaris User) ? If so is there any information > that user can get that they can't through existing commands ? It can be run as a basic user. The aggregated process cpu data requires privilege to enable, and potentially privilege to fetch depending on the permissions of the accounting file. The basic user cannot get access to the individual accounting records, but only the aggregated totals by zone. Today basic users can get /proc cpu usage data, which is basically the same, but only for currently running processes. Sounds like perhaps I should require all zonestat clients to have PRIV_PROC_INFO, as without such privilege, similar tools like prstat would not function. The memory data is available via kstats and private system calls that require no extra privilege. The private system calls are used by prstat -Z and swap -s. I don't see any basic privileges governing kstat access. > > DJM-4 I assume this works in a TX zone configuration Yes. > > DJM-5 I don't see how the FMRI can be Consolidation Private if the > config/sample_internal is Committed. > Good point. Since I support disabling of the smf service (in which zonestat command does not work but fails gracefully), perhaps I should make the smf service committed. I'm not sure what Committed on a service means. > -- > Darren J Moffat From Darren.Moffat@oracle.com Tue Jul 27 09:32:32 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6RGWWlf012339 for ; Tue, 27 Jul 2010 09:32:32 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o6RGWV8j012089 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 27 Jul 2010 11:32:31 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L6800M055Y7QM00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:32:31 -0700 (PDT) Received: from sca-ea-mail-3.sun.com ([192.18.43.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6800J775Y71UB0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:32:31 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by sca-ea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o6RGWUad019959; Tue, 27 Jul 2010 16:32:31 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o6R3pJ4a009297; Tue, 27 Jul 2010 16:32:28 +0000 (GMT) Received: from abhmt005.oracle.com by acsmt355.oracle.com with ESMTP id 441194851280248338; Tue, 27 Jul 2010 09:32:18 -0700 Received: from [10.7.251.221] (/10.7.251.221) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 27 Jul 2010 09:32:18 -0700 Date: Tue, 27 Jul 2010 17:32:13 +0100 From: Darren J Moffat Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <4C4F0705.70404@oracle.com> To: Steve Lawrence Cc: Gerald Jelinek , PSARC-ext@sun.com, jerry.jelinek@oracle.com Message-id: <4C4F0A0D.9040709@Oracle.COM> Organization: Oracle Solaris Security MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090206.4C4F0A1D.00FA:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> <4C4D9D78.2010300@Oracle.COM> <4C4F0705.70404@oracle.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 OracleBeehiveExtension/1.0.0.0pre3 Thunderbird/3.0.4 Status: RO Content-Length: 2570 On 27/07/2010 17:19, Steve Lawrence wrote: > Darren J Moffat wrote: >> DJM-1 zonestatd >> >> What is the SMF method script used to start zonestatd ? ie what >> uid/gid and privileges does it run with ? > /lib/svc/method/svc-zstat > > I'll add that to the interface table. > > It runs as uid/gid 0. I'll work out which privileges are needed so I can > drop the rest. daemon/daemon with privileges would be better. If zonestatd is the method started by SMF you may also be able to remove the basic proc_exec privilege if zonestatd as well. >> DJM-3 Can zonestat(1) run as an normal user (ie with no privileges >> other than basic and no additional RBAC authorisations other than >> those granted by Basic Solaris User) ? If so is there any information >> that user can get that they can't through existing commands ? > It can be run as a basic user. The aggregated process cpu data requires > privilege to enable, and potentially privilege to fetch depending on the > permissions of the accounting file. The basic user cannot get access to > the individual accounting records, but only the aggregated totals by zone. > > Today basic users can get /proc cpu usage data, which is basically the > same, but only for currently running processes. > > Sounds like perhaps I should require all zonestat clients to have > PRIV_PROC_INFO, as without such privilege, similar tools like prstat > would not function. Generally clients would have proc_info but if tools giving similar data (like prstat) would fail then zonestatd shouldn't return that data to the client either. > The memory data is available via kstats and private system calls that > require no extra privilege. The private system calls are used by prstat > -Z and swap -s. I don't see any basic privileges governing kstat access. That is fine no need to restrict those further - well there is in some cases in my opinion but it isn't this case. >> DJM-4 I assume this works in a TX zone configuration > Yes. >> >> DJM-5 I don't see how the FMRI can be Consolidation Private if the >> config/sample_internal is Committed. >> > Good point. Since I support disabling of the smf service (in which > zonestat command does not work but fails gracefully), perhaps I should > make the smf service committed. I'm not sure what Committed on a service > means. Committed for the FMRI means the name is well known and we expect an admin to do 'svcadm enable/disable '. Some SMF services may be implementation details of some bigger architecture and can thus be lower than Committed. -- Darren J Moffat From stephen.lawrence@oracle.com Tue Jul 27 09:47:26 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6RGlPg1012619 for ; Tue, 27 Jul 2010 09:47:26 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o6RGlP6O042242 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 27 Jul 2010 10:47:25 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L680021F6N1ML00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:47:25 -0700 (PDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6800J0L6N023F0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:47:24 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o6RGlNeb023059; Tue, 27 Jul 2010 16:47:23 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o6RGlLxn029603; Tue, 27 Jul 2010 16:47:21 +0000 (GMT) Received: from abhmt014.oracle.com by acsmt353.oracle.com with ESMTP id 461783301280249239; Tue, 27 Jul 2010 09:47:19 -0700 Received: from [129.146.224.51] (/129.146.224.51) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 27 Jul 2010 09:47:18 -0700 Date: Tue, 27 Jul 2010 09:47:16 -0700 From: Steve Lawrence Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <4C4F0A0D.9040709@Oracle.COM> To: Darren J Moffat Cc: Gerald Jelinek , PSARC-ext@sun.com, jerry.jelinek@oracle.com Message-id: <4C4F0D94.8050708@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090203.4C4F0D9A.0119:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> <4C4D9D78.2010300@Oracle.COM> <4C4F0705.70404@oracle.com> <4C4F0A0D.9040709@Oracle.COM> User-Agent: Thunderbird 2.0.0.21 (X11/20090323) Status: RO Content-Length: 562 >> >> It runs as uid/gid 0. I'll work out which privileges are needed so I can >> drop the rest. > > daemon/daemon with privileges would be better. If zonestatd is the > method started by SMF you may also be able to remove the basic > proc_exec privilege if zonestatd as well. > I just reviewed the privileges. zonestatd does a zone_enter() to fetch resource control info, which requires all privileges. I would need to implement a getrctl_byid(2) system call to avoid this. The current getrctl(2) system call uses the context of the caller. -Steve From Darren.Moffat@oracle.com Tue Jul 27 09:58:41 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6RGwebB013232 for ; Tue, 27 Jul 2010 09:58:40 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o6RGwdmr025179 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 27 Jul 2010 11:58:40 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L680051375R3P00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:58:39 -0700 (PDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6800LRM75R8M70@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 09:58:39 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o6RGwcg9019347; Tue, 27 Jul 2010 16:58:38 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o6RGSXN5028633; Tue, 27 Jul 2010 16:58:37 +0000 (GMT) Received: from abhmt006.oracle.com by acsmt353.oracle.com with ESMTP id 461818531280249868; Tue, 27 Jul 2010 09:57:48 -0700 Received: from [10.7.251.221] (/10.7.251.221) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 27 Jul 2010 09:57:47 -0700 Date: Tue, 27 Jul 2010 17:57:44 +0100 From: Darren J Moffat Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <4C4F0D94.8050708@oracle.com> To: Steve Lawrence Cc: Gerald Jelinek , PSARC-ext@sun.com, jerry.jelinek@oracle.com Message-id: <4C4F1008.8080302@Oracle.COM> Organization: Oracle Solaris Security MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090208.4C4F103E.003E:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> <4C4D9D78.2010300@Oracle.COM> <4C4F0705.70404@oracle.com> <4C4F0A0D.9040709@Oracle.COM> <4C4F0D94.8050708@oracle.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.9) Gecko/20100607 Lightning/1.0b1 OracleBeehiveExtension/1.0.0.0pre3 Thunderbird/3.0.4 Status: RO Content-Length: 1070 On 27/07/2010 17:47, Steve Lawrence wrote: >>> It runs as uid/gid 0. I'll work out which privileges are needed so I can >>> drop the rest. >> >> daemon/daemon with privileges would be better. If zonestatd is the >> method started by SMF you may also be able to remove the basic >> proc_exec privilege if zonestatd as well. >> > I just reviewed the privileges. zonestatd does a zone_enter() to fetch > resource control info, which requires all privileges. I would need to > implement a getrctl_byid(2) system call to avoid this. The current > getrctl(2) system call uses the context of the caller. Okay, if this was a full case I would be suggesting TCA maybe TCR to implement getrctl_byid(2) so that zonestatd didn't have to zone_enter() and thus need all privilege. As this is a fast-track I'll suggest the project team log a CR for getrctl_byid(2) if it doesn't already exist, and log a bug for zonestatd to switch to using that and then no longer run with all privilege (basically the equivalent of a TCA without an ARC opinion document). -- Darren J Moffat From stephen.lawrence@oracle.com Tue Jul 27 10:42:20 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o6RHgK1o013588 for ; Tue, 27 Jul 2010 10:42:20 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o6RHgJPg014376 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 27 Jul 2010 12:42:20 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L680070396J9Z00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 10:42:19 -0700 (PDT) Received: from sca-ea-mail-2.sun.com ([192.18.43.25]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6800LPD96J8U90@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 27 Jul 2010 10:42:19 -0700 (PDT) Received: from rcsinet13.oracle.com (rcsinet13.oracle.com [148.87.113.125]) by sca-ea-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o6RHgD56001914; Tue, 27 Jul 2010 17:42:13 +0000 (GMT) Received: from acsmt353.oracle.com (acsmt353.oracle.com [141.146.40.153]) by rcsinet13.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o6RHgCb2012354; Tue, 27 Jul 2010 17:42:12 +0000 (GMT) Received: from abhmt002.oracle.com by acsmt354.oracle.com with ESMTP id 441424181280252528; Tue, 27 Jul 2010 10:42:08 -0700 Received: from [129.146.224.51] (/129.146.224.51) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 27 Jul 2010 10:42:07 -0700 Date: Tue, 27 Jul 2010 10:42:06 -0700 From: Steve Lawrence Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <4C4F1008.8080302@Oracle.COM> To: Darren J Moffat Cc: Gerald Jelinek , PSARC-ext@sun.com, jerry.jelinek@oracle.com Message-id: <4C4F1A6E.8040608@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt353.oracle.com [141.146.40.153] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090203.4C4F1A75.010C:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> <4C4D9D78.2010300@Oracle.COM> <4C4F0705.70404@oracle.com> <4C4F0A0D.9040709@Oracle.COM> <4C4F0D94.8050708@oracle.com> <4C4F1008.8080302@Oracle.COM> User-Agent: Thunderbird 2.0.0.21 (X11/20090323) Status: RO Content-Length: 1283 Darren J Moffat wrote: > On 27/07/2010 17:47, Steve Lawrence wrote: >>>> It runs as uid/gid 0. I'll work out which privileges are needed so >>>> I can >>>> drop the rest. >>> >>> daemon/daemon with privileges would be better. If zonestatd is the >>> method started by SMF you may also be able to remove the basic >>> proc_exec privilege if zonestatd as well. >>> >> I just reviewed the privileges. zonestatd does a zone_enter() to fetch >> resource control info, which requires all privileges. I would need to >> implement a getrctl_byid(2) system call to avoid this. The current >> getrctl(2) system call uses the context of the caller. > > Okay, if this was a full case I would be suggesting TCA maybe TCR to > implement getrctl_byid(2) so that zonestatd didn't have to > zone_enter() and thus need all privilege. > > As this is a fast-track I'll suggest the project team log a CR for > getrctl_byid(2) if it doesn't already exist, and log a bug for > zonestatd to switch to using that and then no longer run with all > privilege (basically the equivalent of a TCA without an ARC opinion > document). > Ok. I've filed both CRs. I've been wanting to implement getrctl_byid() anyway. It would greatly simplify a few commands which currently use a /proc agent thread. From jerry.jelinek@oracle.com Mon Aug 2 05:54:39 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o72CscKN012070 for ; Mon, 2 Aug 2010 05:54:38 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o72CsbDo005343 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 2 Aug 2010 07:54:38 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L6I00J09ZV1B000@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 02 Aug 2010 05:54:37 -0700 (PDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6I00DEAZV0T5E0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 02 Aug 2010 05:54:36 -0700 (PDT) Received: from rcsinet13.oracle.com (rcsinet13.oracle.com [148.87.113.125]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o72CsaRW020413 for ; Mon, 02 Aug 2010 12:54:36 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by rcsinet13.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o724XWYo030625 for ; Mon, 02 Aug 2010 12:54:32 +0000 (GMT) Received: from abhmt009.oracle.com by acsmt354.oracle.com with ESMTP id 476384781280753670; Mon, 02 Aug 2010 05:54:30 -0700 Received: from [10.7.250.48] (/10.7.250.48) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 02 Aug 2010 05:54:29 -0700 Date: Mon, 02 Aug 2010 06:54:28 -0600 From: Jerry Jelinek Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> To: PSARC-ext@sun.com Cc: stephen.lawrence@oracle.com Message-id: <4C56C004.6060502@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090203.4C56C00B.02CB:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.10) Gecko/20100621 Lightning/1.0b1 Thunderbird/3.0.5 Status: RO Content-Length: 247 This case is due to timeout today but it has not received any +1s. I know there was some questions last week, but it looks like Steve responded to all of those. If there is no +1 today, I'll leave the case open until it gets one. Thanks, Jerry From jerry.jelinek@oracle.com Wed Aug 4 10:07:35 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o74H7YKb007762 for ; Wed, 4 Aug 2010 10:07:35 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o74H7Yu1023315 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 4 Aug 2010 11:07:34 -0600 (MDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L6N00G030WMKZ00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 04 Aug 2010 11:07:34 -0600 (MDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6N00CYT0WMBB10@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 04 Aug 2010 11:07:34 -0600 (MDT) Received: from rcsinet15.oracle.com (rcsinet15.oracle.com [148.87.113.117]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o74H7XlI010820 for ; Wed, 04 Aug 2010 17:07:33 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by rcsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o74H7Vs4030189 for ; Wed, 04 Aug 2010 17:07:31 +0000 (GMT) Received: from abhmt020.oracle.com by acsmt353.oracle.com with ESMTP id 484967761280941626; Wed, 04 Aug 2010 10:07:06 -0700 Received: from [10.7.250.48] (/10.7.250.48) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 04 Aug 2010 10:07:05 -0700 Date: Wed, 04 Aug 2010 11:07:00 -0600 From: Jerry Jelinek Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> To: PSARC-ext@sun.com Cc: stephen.lawrence@oracle.com Message-id: <4C599E34.90809@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090208.4C599E55.0116:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.10) Gecko/20100621 Lightning/1.0b1 Thunderbird/3.0.5 Status: RO Content-Length: 95 This case was approved at todays PSARC meeting. I've marked it closed approved. Thanks, Jerry From sebastien.roy@oracle.com Wed Aug 4 11:01:34 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o74I1Y92010444 for ; Wed, 4 Aug 2010 11:01:34 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o74I1UEc025798 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 4 Aug 2010 13:01:31 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L6N0070Z3EIGN00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 04 Aug 2010 11:01:30 -0700 (PDT) Received: from sca-ea-mail-2.sun.com ([192.18.43.25]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L6N006EF3EHVG00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 04 Aug 2010 11:01:29 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by sca-ea-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o74I1TWf020341 for ; Wed, 04 Aug 2010 18:01:29 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o74EiNdV014275 for ; Wed, 04 Aug 2010 18:01:29 +0000 (GMT) Received: from abhmt006.oracle.com by acsmt354.oracle.com with ESMTP id 466169021280944887; Wed, 04 Aug 2010 11:01:27 -0700 Received: from [129.148.174.103] (/129.148.174.103) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 04 Aug 2010 11:01:27 -0700 Date: Wed, 04 Aug 2010 14:01:25 -0400 From: Sebastien Roy Subject: Re: zonestat [PSARC/2010/291 FastTrack timeout 08/02/2010] In-reply-to: <4C599E34.90809@oracle.com> To: Jerry Jelinek Cc: PSARC-ext@sun.com, stephen.lawrence@oracle.com Message-id: <4C59AAF5.50000@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090204.4C59AAF9.00C8:SCFMA4539814,ss=1,fgs=0 References: <201007261319.o6QDJvZK012342@sac.sfbay.sun.com> <4C599E34.90809@oracle.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.2.7) Gecko/20100717 Lightning/1.0b2pre Thunderbird/3.1.1 Status: RO Content-Length: 205 On 08/ 4/10 01:07 PM, Jerry Jelinek wrote: > This case was approved at todays PSARC meeting. > I've marked it closed approved. I gave the case a +1 during the meeting, and am doing so here as well. -Seb