Return to fam.conf.in CVS log

Up to [Development] / fam / fam

Annotation of fam/fam/fam.conf.in, Revision 1.1

1.1     ! trev        1: ##  fam.conf.in
        !             2: ##
        !             3: ##  Lines starting with ## should be removed by configure.in when fam.conf
        !             4: ##  is generated.
        !             5: ##
        !             6: #  fam.conf
        !             7: #
        !             8: #  For more information on the configuration options below, see the
        !             9: #  fam(1M) man page.
        !            10:
        !            11: #
        !            12: #  insecure_compatibility disables authentication.  This causes
        !            13: #  untrusted_user to be ignored, because the UID presented by every client
        !            14: #  connection will be believed.
        !            15: #
        !            16: #  The -C command-line argument overrides this option.
        !            17: #
        !            18: insecure_compatibility = false
        !            19:
        !            20: #
        !            21: #  untrusted_user is the user which will be used for unauthenticated
        !            22: #  clients.  If a file can't be stat'ed by this user, those clients won't be
        !            23: #  able to fam it.  The value can be a user name or a numeric UID.
        !            24: #
        !            25: untrusted_user = nobody
        !            26:
        !            27: #
        !            28: #  local_only makes fam ignore requests from remote clients & remote fams.
        !            29: #  Note that this is ignored if fam is started by inetd.
        !            30: #
        !            31: #  The -L command-line argument overrides this option.
        !            32: #
        !            33: local_only = false
        !            34:
        !            35: #
        !            36: #  xtab_verification makes fam check the list of exported filesystems to
        !            37: #  verify that requests from remote hosts fall on filesystems which are
        !            38: #  exported to the hosts.
        !            39: #
        !            40: xtab_verification = true
        !            41:
        !            42: #
        !            43: #  idle_timeout sets the number of seconds fam will wait for new
        !            44: #  connections before quitting.  A value of zero will cause fam to
        !            45: #  wait indefinitely.  The default is 5.
        !            46: #
        !            47: #  The -T command-line argument overrides this option.
        !            48: #
        !            49: #idle_timeout = 5
        !            50:
        !            51: #
        !            52: #  nfs_polling_interval sets the number of seconds between polling files
        !            53: #  on NFS filesystems.  The default is 6.
        !            54: #
        !            55: #  The -t command-line argument overrides this option.
        !            56: #
        !            57: #nfs_polling_interval = 6
        !            58:
        !            59: ##  This is removed because the HAVE_MAC and HAVE_AUDIT stuff is not done.
        !            60: ###
        !            61: ###  By default, fam will use its clients' MAC labels if MAC and IP_SECOPTS
        !            62: ###  are sysconf'd on, and will ignore this flag if the system doesn't support
        !            63: ###  MAC and TSIX.  The only use for this flag is to disable MAC-label-setting
        !            64: ###  on a system which supports it, which is probably undesirable.
        !            65: ###
        !            66: ##disable_mac = false
        !            67: ##
        !            68: ###
        !            69: ###  By default, fam will use SAT (Security Audit Trails) if it's sysconf'd on,
        !            70: ###  and will ignore this flag if the system doesn't support SAT.  The only use
        !            71: ###  for this flag is to disable auditing on a system which supports it, which
        !            72: ###  is probably undesirable.
        !            73: ###
        !            74: ##disable_audit = false