Just a question out of interest: Let's say you put root's directory to another zfs dataset. This dataset has been backupped to an USB stick. I find it (the USB) and I take it to a new OI server and try to import it. This will work since it is not encrypted. On the new server i am root with a new/different password. Since i am root, i can open the old root directory and read its bash history. Voila. I know all things from the old admin.
Kind regards, The out-side Op 9 feb. 2013 om 15:59 heeft Reginald Beardsley <[email protected]> het volgende geschreven: > Why wouldn't using a separate filesystem in rpool take care of things? Am I > missing something? > > zfs create -o mountpoint=/root rpool/root_home > > (obviously /root needs to be empty at creation) > > You could sync across multiple machines using any number of approaches. > > For admin across multiple machines I'd argue that RBAC is the proper > approach. In my view, /root is really for bare metal level admin. > > Have Fun! > Reg > > > > _______________________________________________ > OpenIndiana-discuss mailing list > [email protected] > http://openindiana.org/mailman/listinfo/openindiana-discuss _______________________________________________ OpenIndiana-discuss mailing list [email protected] http://openindiana.org/mailman/listinfo/openindiana-discuss
