[kmf-discuss] PSARC 2006/283 Certificate & PKCS#11 PAM, module

[Alan Coopersmith]

Bart Smaalders wrote:
> Garrett D'Amore wrote:
> 
>> must support the various Big Rules (including auditable administration),
> 
> I asked Gary this question, but he declined to answer:
> 
> What project satisfies this big Rule today?

SMF.

> If my project introduced a config file in /etc/, how could I meet this
> big rule?

You could provide a fooconfig command, or plugin to some administration
toolset (if we had one with a future, unlike smc), but many projects don't,
which is why new config files in /etc were banned by the SMF policy.

Of course, like most big rules & SAC policies, we only apply to new projects,
and the trivial way to be exempted is to leave the old code untouched and
not come back to ARC with any enhancements, effectively encouraging
stagnation.

-- 
	-Alan Coopersmith-           alan.coopersmith at sun.com
	 Sun Microsystems, Inc. - X Window System Engineering