Gary Winiger wrote:
>> This is an oversight, because offline manipulation of the repository
>> does not allow a manual commit. We propose to introduce a new
>> "refresh" subcommand to svccfg(1M). If svccfg is operating on
>> the repository for the live system, this subcommand will
>> invoke svcadm refresh to accomplish the standard refresh actions
>
> Leaving the discussion of confusion to others ;-{, I have
> a nit question: Now that audit is being done by svc.configd,
> is there a new interface that needs to be audited relative
> to introducing the svccfg refresh subcommand?
I just confirmed with Tom that nothing new is needed in code or in the
audit records.
Auditing is done by configd, not the individual commands. The svccfg
refresh action for the system repository will be audited with the
standard ADT_smf_refresh path. Actions on offline repositories aren't
audited.
liane
