comparison usr/src/cmd/fm/fmd/common/fmd_rpc.c @ 12979:ab9ae749152f

PSARC/2009/617 Software Events Notification Parameters CLI PSARC/2009/618 snmp-notify: SNMP Notification Daemon for Software Events PSARC/2009/619 smtp-notify: Email Notification Daemon for Software Events PSARC/2010/225 fmd for non-global Solaris zones PSARC/2010/226 Solaris Instance UUID PSARC/2010/227 nvlist_nvflag(3NVPAIR) PSARC/2010/228 libfmevent additions PSARC/2010/257 sysevent_evc_setpropnvl and sysevent_evc_getpropnvl PSARC/2010/265 FMRI and FMA Event Stabilty, 'ireport' category 1 event class, and the 'sw' FMRI scheme PSARC/2010/278 FMA/SMF integration: instance state transitions PSARC/2010/279 Modelling panics within FMA PSARC/2010/290 logadm.conf upgrade 6392476 fmdump needs to pretty-print 6393375 userland ereport/ireport event generation interfaces 6445732 Add email notification agent for FMA and software events 6804168 RFE: Allow an efficient means to monitor SMF services status changes 6866661 scf_values_destroy(3SCF) will segfault if is passed NULL 6884709 Add snmp notification agent for FMA and software events 6884712 Add private interface to tap into libfmd_msg macro expansion capabilities 6897919 fmd to run in a non-global zone 6897937 fmd use of non-private doors is not safe 6900081 add a UUID to Solaris kernel image for use in crashdump identification 6914884 model panic events as a defect diagnosis in FMA 6944862 fmd_case_open_uuid, fmd_case_uuisresolved, fmd_nvl_create_defect 6944866 log legacy sysevents in fmd 6944867 enumerate svc scheme in topo 6944868 software-diagnosis and software-response fmd modules 6944870 model SMF maintenance state as a defect diagnosis in FMA 6944876 savecore runs in foreground for systems with zfs root and dedicated dump 6965796 Implement notification parameters for SMF state transitions and FMA events 6968287 SUN-FM-MIB.mib needs to be updated to reflect Oracle information 6972331 logadm.conf upgrade PSARC/2010/290
author Gavin Maltby <gavin.maltby@oracle.com>
date Fri, 30 Jul 2010 17:04:17 +1000
parents 47a6bab786ba
children
comparison
equal deleted inserted replaced
12978:19d842faf8e4 12979:ab9ae749152f
17 * information: Portions Copyright [yyyy] [name of copyright owner] 17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 * 18 *
19 * CDDL HEADER END 19 * CDDL HEADER END
20 */ 20 */
21 /* 21 /*
22 * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 22 * Copyright (c) 2004, 2010, Oracle and/or its affiliates. All rights reserved.
23 * Use is subject to license terms. 23 */
24 */
25
26 #pragma ident "%Z%%M% %I% %E% SMI"
27 24
28 #include <sys/types.h> 25 #include <sys/types.h>
29 #include <sys/fm/util.h> 26 #include <sys/fm/util.h>
30 27
31 #include <netdir.h> 28 #include <netdir.h>
234 } 231 }
235 232
236 /* 233 /*
237 * Utillity function to fetch the XPRT's ucred and determine if we should deny 234 * Utillity function to fetch the XPRT's ucred and determine if we should deny
238 * the request. For now, we implement a simple policy of rejecting any caller 235 * the request. For now, we implement a simple policy of rejecting any caller
239 * who does not have the PRIV_SYS_CONFIG bit in their Effective privilege set, 236 * who does not have the PRIV_SYS_ADMIN bit in their Effective privilege set,
240 * unless the caller is loading a module, which requires all privileges. 237 * unless the caller is loading a module, which requires all privileges.
241 */ 238 */
242 int 239 int
243 fmd_rpc_deny(struct svc_req *rqp) 240 fmd_rpc_deny(struct svc_req *rqp)
244 { 241 {
263 * module load when running a non-DEBUG fault management daemon. 260 * module load when running a non-DEBUG fault management daemon.
264 */ 261 */
265 if (rqp->rq_proc == FMD_ADM_MODLOAD) 262 if (rqp->rq_proc == FMD_ADM_MODLOAD)
266 return (!priv_isfullset(psp)); 263 return (!priv_isfullset(psp));
267 #endif 264 #endif
268 return (!priv_ismember(psp, PRIV_SYS_CONFIG)); 265 return (!priv_ismember(psp, PRIV_SYS_ADMIN));
269 } 266 }