Alan,
Thanks for your project teams hard work and flexibility in
working to converge this case.
> Updated RBAC and design documents attached. The RBAC document
> has been revised throughout so I'll let you read it and I can
> respond to questions.
I think things look fine in the ndmp_rbac.txt supplied.
In looking at the design doc and the man pages it points to,
there seems to be misalignment. IMO, it would be good to
warp up a final spec for archiving in the case with everything
aligned. I can guess at what's meant.
There are also some nit's I'd point out in the doc:
4.3 SMF properties is out of date vis-a-vis
cram-md5-username/password and cleartext-username/password.
I presume these are administered by ndmpadm set, but they are
not in the man page.
4.1 Exported interfaces. Auditing is usually not an exported
interface. 4.10 This project is importing adt_* interfaces from
PSARC/2000/517. These are Contraced Project Private. So in
your imported interfaces you should have libbsm Contracted
Project Private with a reference to PSARC/2000/517.
> The design document has a few minor revisions. I updated
> sections 4.6 and 10 to indicate what we agreed on auditing
> and include the dependency on libbsm.
As I've offered before, I'll help y'all with (or write) the use
of the adt_* audit interfaces. Let's stay intouch as you get
to that part of the project.
Gary..
