I like login classes for more fine tuning, i.e. per class, rather than
system wide. That way I don't have to have my account use sudo or su to be
able to ps -a, if I just want to do general checking or reporting from
it...

/joseph

--
Joseph Mallett           Security Specialist
jmallett@newgold.net         www.newgold.net

irc.openprojects.net/#xMach  xMach Core Team
jmallett@xMach.org             www.xMach.org

xMach Research Group            www.xmrg.com

From #HURD/irc.openprojects.net
<anonymous> actually it'd be cool if emacs were a server.

On Wed, 18 Apr 2001, Manuel Bouyer wrote:

> On Tue, Apr 17, 2001 at 01:16:47AM +1000, matthew green wrote:
> > i'm curious as to implementation thoughts for this -- does the kernel
> > get to learn about classes or do we get a ps daemon or do we go back
> > to a set-id ps?  all sounds rather ugly to me.
>
> per-process, inheritable sysctl, which can only be set to 1 by root ?
> The proc. sysctl tree can (and should :) be used for much more than rlimit :)
>
> --
> Manuel Bouyer <bouyer@antioche.eu.org>
> --
>