[indiana-discuss] "no scripting zone" and isaexec(3C) == architectural

[Chris Ridd]

On 7 Jun 2009, at 12:43, UNIX admin wrote:

>> I think "self assembling" means delivering multiple
>> files, and your
>> software explicitly looking for all those files to
>> configure (or
>> whatever) itself.
>>
>> For an example, consider how Apache's httpd.conf file
>> is often
>> configured to include other files via a glob, eg
>> /etc/httpd/local/*.conf
>
> Yes, this is how every software with configuration files should  
> function. Unfortunately, not all do; BIND DNS software is one such  
> example, where it allows "include" in certain places, but not  
> everywhere, so that it becomes necessary to inject per-network and  
> per-host entries into the .conf file(s).

Agreed.

> But, how to achieve such a thing with IPS?

The escape clause in IPS is to install a one-shot SMF service that can  
do whatever you want, like assemble a config file from multiple bits.

Cheers,

Chris