Paul B. Henson wrote:
> What would be the best way to allow the service account to chown the newly
> created ZFS filesystem to the appropriate user? Right now I'm tentatively
> thinking of making a small suid root binary only executable by the service
> account which would take a username and chown appropriately.
> 
> Any other suggestions?

Run the "service" with the file_chown privilege.  See privileges(5), 
rbac(5) and if it runs as an SMF service smf_method(5).

--
Darren J Moffat
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Reply via email to