> > But then several property groups will have the same name.
> 
> Why not
> 
>       <property_group name='SUNW,binfile' type='application'>
>               <propval file='audit_binfile.so' type='astring'/>

        Well, I'm not hung up on SUNW, or no SUNW, .  What I really
        do what is something straight forward for the admin.
        Such as
                svccfg -s auditd setprop binfile/enable = true
                svccfg -s auditd setprop binfile/minfree = 20
                svccfg -s auditd setprop binfile/dirs = "/var/audit,\
                        /var1/audit,/var2/audit"

        I don't expect the path name to change (thought it could).

> >     <property_group name='config' type='application'>
> >             <propval name='flags' type='astring' value='' />
> 
> Is this supposed to be a bitfield?  If so, count or integer would be
> more appropriate.

        No, flags is an astring.  For example, "all,^+ss,^+as"

> >     <property_group name='binfile' type='SUNW,audit_plugin'>
> 
> Yeah, this should be name="SUNW,binfile" type="application".

        See above svccfg.  I "audit_binfile" perhaps to match the man
        page audit_binfile(5); audit_syslog(5).

> 
> >             <propval name='name' type='astring' value='audit_binfile.so' />
> 
> I think "path" or "file" or "filename" might be a better name for this.

        "path" or "file" or even "plugin" as today in audit_control(5).
        may all be appropriate -- "name" was my earlier suggestion ;-(

Gary..

Reply via email to