On Tue, May 15, 2018 at 08:33:20AM -0700, Wes Hardaker via Net-snmp-coders wrote: > Bart Van Assche <bvanass...@acm.org> writes: > > > Is there perhaps a list available of the MIBs that are compatible with > > --enable-read-only, --enable-mini-agent and --enable-minimalist? > > They all do different things: > > 1) --enable-read-only has been around longer than snmpping.c, and it's > clear that the person that Bill didn't test snmpping with all the > configure options (not at all surprising; I would have likely missed > it too). This is something that we should fix as we move to github: > ensure code does compile with various restrictive command line apps. > > [FYI, --enable-read-only really does remove write related defines > from the cpp output code base to ensure there is no way write support > can be complied in; it's for high-security or very-low-code-size > platforms that really want read-only code; it was also designed to > pass the output of cpp to an auditor who would have less "real code" > to review and certify] > > 2) --enable-mini-agent really just drops out most of the default mib > modules that we include. IE, it drops the host resources mib and > mibII trees for people that want to build an agent with just their > enterprise specific things, etc. > > 3) --enable-minimalist is an interesting one that is also designed for > code reduction in that one section of code can declare the need for a > function, and if and only if that function is needed by something > else will it be included. If you want a really reduced code base for > auditing, security, etc, this is the flag that will get you the > farthest there.
One other issue with --enable-minimalist is that it is kind of broken since it requires that you pass information back from the agent building pass to the lib building pass and from the mib pass to the agent pass but that happens to late. I have been toying with a partial cpp implementation in awk in order to handle this but not gotten it clean enough to use (and the windows people would probably hate me forever if I made awk a requirement (awk is faster than C when you have to compile the C code first but C is more portable - choose your poison)) Yet another issue with --enable-minimalist is that configure --enable-minimalist make make clean make results in the second make failing. I have largely put all build issues on hiatus since the cmake patches would change everything anyhow so I am kind of eager to see them applied. > > Is this a known issue? > > So no. But snmpping shouldn't be complied with --enable-read-only since > it requires SET support to operate. It should be excluded in the same > way that snmpset is excluded. > > -- > Wes Hardaker > Please mail all replies to net-snmp-coders@lists.sourceforge.net > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Net-snmp-coders mailing list > Net-snmp-coders@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
