illumos gate

I committed a configuration for a zone that passed 'verify' within zonecfg but on boot, failed to verify with zoneadm.

Existing zone config:

# zonecfg -z foo 
zonecfg:foo> export
create -b
set zonepath=/data/zones/foo
set brand=ipkg
set autoboot=true
set limitpriv=default,dtrace_proc,dtrace_user
set ip-type=exclusive
add net
set physical=foo0
end
add dataset
set name=data/set/foo
end

Updated config changed limitpriv:

zonecfg:foo> set limitpriv=default,dtrace_proc,dtrace_user,sys_net_config
zonecfg:foo> verify
zonecfg:foo> commit
zonecfg:foo>

Upon boot:

# zoneadm -z foo boot
privilege "sys_net_config" is not permitted within the zone's privilege set
zoneadm: zone foo failed to verify

It turns out that I don't need this privilege anyway, but I would expect zonecfg to squeal about this when I asked it to verify the config.