Gary Winiger wrote: > Alan, > > Thanks for your project teams hard work and flexibility in > working to converge this case. > > > Updated RBAC and design documents attached. The RBAC document > > has been revised throughout so I'll let you read it and I can > > respond to questions. > > I think things look fine in the ndmp_rbac.txt supplied. > In looking at the design doc and the man pages it points to, > there seems to be misalignment. IMO, it would be good to > warp up a final spec for archiving in the case with everything > aligned. I can guess at what's meant.
Thanks, I'll work with the team and try to get the document updated (including your points below) today. > There are also some nit's I'd point out in the doc: > > 4.3 SMF properties is out of date vis-a-vis > cram-md5-username/password and cleartext-username/password. > I presume these are administered by ndmpadm set, but they are > not in the man page. > > 4.1 Exported interfaces. Auditing is usually not an exported > interface. 4.10 This project is importing adt_* interfaces from > PSARC/2000/517. These are Contraced Project Private. So in > your imported interfaces you should have libbsm Contracted > Project Private with a reference to PSARC/2000/517. > > > The design document has a few minor revisions. I updated > > sections 4.6 and 10 to indicate what we agreed on auditing > > and include the dependency on libbsm. > > As I've offered before, I'll help y'all with (or write) the use > of the adt_* audit interfaces. Let's stay intouch as you get > to that part of the project. Thanks, this is very much appreciated. We'll be in touch. Alan
