> As I said, violent agreement. I was just trying to make sure there
> weren't any unresolved conflicts, and there weren't.
Jumping in late and probably missing some important mail, but....
Documented best practice (pre IPS -- which really doesn't exist
yet from an ARC perspective) is that consolidations deliver
their own RBAC database entries and use the i.rbac class action
script to install them. Beyond that the IPS team needs to provide
an equivalent best practice. Failing that, if the ngrep project
team doesn't get ARCable advice from the IPS team, I (thought
not confirmed with others of the RBAC project team) would advise
doing the expedient and integrating into both SFW and ON.
More concerning for the i.rbac class action script are unbundleds.
Still on sabbatical,
Gary..
