>> Or maybe a compiled smiucv should also be on the Downloads page? ... > I'll talk to Leland about shipping a prebuilt one, though > -- no need to force a toolchain install if not needed.
CORRECT. And for "external facing" or "cloud" guests, it's important to NOT have the toolchain available. Yeah, yeah, you hardened it. But you still don't want the intruder to have a compiler when he cracks your hardening. -- R; <>< On Thu, Jun 13, 2013 at 2:33 PM, David Boyes <dbo...@sinenomine.net> wrote: >> > 1) a section on setting up the CMS SSL server to provide secure >> management traffic transport. >> > 2) a section on enabling SMAPI and the use of smaclient to manipulate >> the images. >> >> We had talked about the SSL server early. Apparently this is a complicated >> install. Given the quantity of material we've already agreed to add, I don't >> think it's realistic to also address the SSL server. > > Exactly why it needs to be addressed. 8-) That thing is such an enormous PITA > that everyone struggles with it. I wish IBM had taken me up on fixing the > Linux-based one; it was a heck of a lot easier to install and support, and > we'd have full crypto offload support by now. > > http://www.vm.ibm.com/devpages/HUGENBRU/SSL540.PDF has a fair cookbook to > setting it up; maybe you could get the author to abstract it into some text, > or just put a pointer in to that doc? > >> I've even started that task and have run into a small issue. I got >> smaclient-1.1 from http://download.sinenomine.net/smaclient/, renamed it >> to just smaclient, installed gcc on a RHEL 6.4 system and tried a SMAPI >> command: >> >> # smaclient iqd -T lnxadmin >> /usr/local/sbin/smaclient: line 948: smiucv: command not found >> get4 called with insufficient data >> >> Should not smiucv have been magically compiled on the fly as this system has >> gcc? >> # which gcc >> /usr/bin/gcc >> >> Or maybe a compiled smiucv should also be on the Downloads page? > > No, you need to generate it, since IUCV connectivity is only useful on the > same VM system or within a VM SSI cluster. See help output or the top of the > script. I'll talk to Leland about shipping a prebuilt one, though -- no need > to force a toolchain install if not needed. > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ -- -- R; <>< ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
