Just out of curiosity, if everything else is Volatile, is there
significant benefit to having the names of configuration files be
"Committed"? (I mean apart from the pam.conf file, which of course
*must* be Committed?)
Otherwise, I believe the issue of "conformance to audit" has been
discussed, and I'll defer to the judgment of more senior members (though
I'd like to see a TCA for some kind of utility to simplify configuration
-- or at least some "common standard set of configurations" with support
for audit and rbac.)
I'd also like to see a TCA for clean up of the make_hash_links.sh
interface. Having a shell script off in /etc/security just seems a bit
"unfinished" to me -- sort of like the original authors got to "good
enough for my use", and then stopped working on it. (Seems like at a
minimum, this utility should lose the .sh, move to /usr/sbin, and
acquire a man page.)
Its likely that I will *not* be at Wednesday's meeting, but if the above
items are addressed (by TCA or TCR, and in the case of the concerns
about audit to the satisfaction of those other "senior members"), then
please consider my input as a vote to approve.
-- Garrett
Huie-Ying Lee wrote:
> Gary Winiger wrote:
>>> The project team has been playing fetch-a-rock for too long. The
>>> final specs have been submitted, I think Darren is planning on
>>> putting them in the case dir very soon. This case should be
>>> approved so the team can move ahead.
>>
>> Is there a spec update yet for this?
>>
>> Gary..
>
> The updated spec and man pages can be found in the attached email.
>
> Thanks,
> Huie-Ying
> ------------------------------------------------------------------------
>
> Subject:
> Re: PSARC/2006/283 final spec
> From:
> Huie-Ying Lee <huie-ying.lee at sun.com>
> Date:
> Fri, 28 Mar 2008 09:27:08 -0700
> To:
> Darren J Moffat <Darren.Moffat at sun.com>
>
> To:
> Darren J Moffat <Darren.Moffat at sun.com>
> CC:
> Anup Sekhar <Anup.Sekhar at sun.com>, Steve De Tar
> <Steven.Detar at sun.com>, Wyllys Ingersoll <wyllys.ingersoll at sun.com>
>
>
> Darren J Moffat wrote:
>> Since you are removing the pkcs11_eventmgt I need a final spec doc so
>> I can mark this case as closed approved.
>>
>> Once I have that in the case dir I'll close the case.
>>
>
> The updated final spec is attached here. Please remove the
> pkcs11_eventmgr.1 file from the case materials.
>
> I also updated the pam_pkcs11.5 to remove the command and man path
> names under the FILES: section. The pkcs11_inspect.1 and
> pklogin_finder.1 man pages were cleaned up a bit also. The updated
> man pages are attached here.
>
>
> Thanks,
> Huie-Ying
