> Has/Does anyone have binaries for IRIX 5.3, 6.2 ... available ?
I can build you 5.3 and/or 6.2 binaries, if you can wait a week or two. (My
wife & I are having a baby tomorrow, so I will be out!)
However, this version of fam probably won't do you much good without a
compiler. Here's why:
The previous version of libfam does perform any authentication; that is, an
application talking to fam through libfam doesn't prove to the fam daemon
that it is who it says it is. That wouldn't matter, except that the
previous version of libfam was only available as a static archive, not a
shared library. That means every client application which was compiled with
libfam has the non-authenticating fam communication built in.
That means when you install the new fam (which treats clients as untrusted
until they authenticate themselves), your existing fam clients (like
everything in the desktop) won't attempt to authenticate themselves, and
will only be able to monitor files which can be stat'ed by "nobody" (or
whoever you set as the untrusted user in your fam.conf). This means either
"nobody" (and any rogue fam client) will be able to monitor your files (in
which case there's not much reason to switch to the new version), or your
existing fam clients will pretty much be broken (in which case... there's
not much reason to switch to the new version).
If you still want to pursue it, one thing you might try once you have
binaries is to set up fam so that it runs with the insecure-compatibility
configuration option (so your existing clients will still work), but
local-only (so it won't accept connections from remote hosts), and then make
sure you don't have an open guest account etc. (And don't monitor remote
filesystems if you can help it, as fam will have to poll over NFS because
fam on the NFS server won't talk to it.) This approach might make sense if
you really want to run the desktop etc. on a machine that isn't behind a
firewall.
> Anyone have any Idea when an sgi patch will be available ?
This version of fam is in 6.5.8, which ships in May. I don't know, but I
assume a patch for 6.2 will be available around then, or sometime before.
(And I expect the patch itself will make life ugly for everyone; it'll have
to contain every fam client distributed by SGI, and will break any
home-grown or third-party fam client that isn't recompiled with the new
libfam... Blehh.)
--Rusty
--
To unsubscribe: echo unsubscribe fam | mail majordomo@xxxxxxxxxxx
|