Garrett D'Amore wrote: >> Similarly the existing ON rmt program does not do any audit so >> replacing it with the rmt from star should not be required to do any >> auditing either. > > I *strongly* disagree with this one. Joerg's /etc/rmt makes > authorization/access control decisions based on a policy of its own > (driven by the /etc/default/rmt file). I don't think you can get away > without doing auditing if you're going to have this "security > enhancement" in rmt.
In that case yes it probably should be doing auditing or that feature should be disabled until it can. I missed that the new rmt has more functionality than what it is replacing. -- Darren J Moffat
