PSARC 2009/377; 2009/378; 2010/072

PSARC 2009/377

• In-kernel pfexec implementation.

PSARC 2009/378

• Basic File Privileges

PSARC 2010/072

• RBAC update: user attrs from profiles,


• 4912090 pfzsh(1) should exist,


• 4912093 pfbash(1) should exist,


• 4912096 pftcsh(1) should exist,


• 6440298 Expand the basic privilege set in order to restrict file access,
  
• 6859862 Move pfexec into the kernel, [that one is interesting - trochej]


• 6919171 cred_t sidesteps kmem_debug; we need to be able to detect bad hold/