>   My question is, if the afs binaries are under /afs (as transarc tell
> us to do), how could package  access them unless  all ACL are open for
> system:anyuser (as transarc tell us no to do)?

My recommendation is to use IP address acls.  This way you can make
your files readable by any host on your site, but not anywhere else.
This way, in effect, you can have system:anyuser access as far as
users go, but only the hosts at your site will have any access.

-derek


Reply via email to