[kmf-discuss] PSARC 2006/283 Certificate & PKCS#11 PAM, module

[Darren J Moffat]

Garrett D'Amore wrote:
> Nicolas Williams wrote:
>> IMO not all configuration files can have admin CLIs/APIs/GUIs without
>> enormous expense, and maybe some can't really have any that are all that
>> great (think pam.conf(4)[*]).
>>
>> ZFS audit SACLs ought to take care of the auditing issue (though, of
>> course, turning on file auditing will take care of it now).
>>
>> [*]  PSARC/2005/275 will make it so we can deal with PAM profiles, but
>>      at the end of the day, what tool could really help you edit a PAM
>>      profile?  pam.conf is almost a language.
>>   
> 
> This project introduces additional configuration *beyond* pam.conf.

and there is precedence in other cases where PAM modules have config 
files that are text and not in SMF. Those other cases are not even that 
old (and post date the introduction of SMF) - I've already given at 
least one of them.

-- 
Darren J Moffat