openssh bugs - Sep 2010 - [Bug 1824] New: Added project(4) support for Solaris 10

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

           Summary: Added project(4) support for Solaris 10
           Product: Portable OpenSSH
           Version: -current
          Platform: All
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: cory.erickson at csu.mnscu.edu


Created attachment 1929
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1929
patch for solaris projects support

Projects are the basis for resource controls in Solaris 10. The current
openssh doesn't appear to support projects, so the default project
(system) is inherited from the parent sshd:

[ericksco]unixprd:~$ ssh themis
Last login: Sun Sep 19 11:24:46 2010 from unixprd.mnscu.e
Sun Microsystems Inc.   SunOS 5.10      Generic January 2005
[ericksco]themis:~$ projects -d # displays default project
default
[ericksco]themis:~$ id -p # however, "system" project is inherited
from
sshd
uid=1108(ericksco) gid=101(admins) projid=0(system)

With the project support enabled, sshd can properly set the default
project (as uid=0) before spawning client command/shell:

[ericksco]unixprd:~$ ssh timmy
Last login: Tue Sep 21 20:40:40 2010 from unixprd.mnscu.e
Sun Microsystems Inc.   SunOS 5.10      Generic January 2005
[ericksco]timmy:~$ projects -d # displays default project
group.admins
[ericksco]timmy:~$ id -p # now effective project is correct
uid=1108(ericksco) gid=101(admins) projid=11(group.admins)

The library calls utilized are:

- getdefaultproj()

Obtains the default project for the user logging in.

- setproject()

Sets the project for the session. Requires special privs (uid=0) or
will fail.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> 2010-10-12 13:48:04
EST ---
Hi, could you regenerate this patch as a unified diff ("diff -u") and
reattach? Unified diffs are much easier to read and review.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Cory Erickson <cory.erickson at csu.mnscu.edu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1929|0                           |1
        is obsolete|                            |

--- Comment #2 from Cory Erickson <cory.erickson at csu.mnscu.edu>
2010-10-19 09:08:31 EST ---
Created attachment 1937
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1937
solaris project support added to SNAP-20100922

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1937|application/octet-stream    |text/plain
          mime type|                            |
   Attachment #1937|0                           |1
           is patch|                            |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au
             Blocks|                            |1803

--- Comment #3 from Darren Tucker <dtucker at zip.com.au> 2010-11-05
11:29:11 EST ---
looks mostly ok but I'd like to put the code in port-solaris.c and the
hook into platform.c for maintainability reasons.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

--- Comment #4 from Darren Tucker <dtucker at zip.com.au> 2010-11-05
11:30:50 EST ---
Created attachment 1948
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1948
openssh-solaris-projects.patch

Move code into port-solaris.c

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1948|0                           |1
           is patch|                            |
   Attachment #1948|                            |ok?(djm at mindrot.org)
              Flags|                            |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1948|ok?(djm at mindrot.org)        |ok+
              Flags|                            |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #5 from Darren Tucker <dtucker at zip.com.au> 2010-11-05
12:20:04 EST ---
Modified patch applied and it will be in 5.7p1.  Thanks.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1824

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #6 from Damien Miller <djm at mindrot.org> 2011-01-24 12:33:51
EST ---
Move resolved bugs to CLOSED after 5.7 release

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.