## fam.conf.in ## ## Lines starting with ## should be removed by configure.in when fam.conf ## is generated. ## # fam.conf # # For more information on the configuration options below, see the # fam(1M) man page. # # insecure_compatibility disables authentication. This causes # untrusted_user to be ignored, because the UID presented by every client # connection will be believed. # # The -C command-line argument overrides this option. # insecure_compatibility = false # # untrusted_user is the user which will be used for unauthenticated # clients. If a file can't be stat'ed by this user, those clients won't be # able to fam it. The value can be a user name or a numeric UID. # untrusted_user = nobody # # local_only makes fam ignore requests from remote clients & remote fams. # Note that this is ignored if fam is started by inetd. # # The -L command-line argument overrides this option. # local_only = false # # xtab_verification makes fam check the list of exported filesystems to # verify that requests from remote hosts fall on filesystems which are # exported to the hosts. # xtab_verification = true # # idle_timeout sets the number of seconds fam will wait for new # connections before quitting. A value of zero will cause fam to # wait indefinitely. The default is 5. # # The -T command-line argument overrides this option. # #idle_timeout = 5 # # nfs_polling_interval sets the number of seconds between polling files # on NFS filesystems. The default is 6. # # The -t command-line argument overrides this option. # #nfs_polling_interval = 6 ## This is removed because the HAVE_MAC and HAVE_AUDIT stuff is not done. ### ### By default, fam will use its clients' MAC labels if MAC and IP_SECOPTS ### are sysconf'd on, and will ignore this flag if the system doesn't support ### MAC and TSIX. The only use for this flag is to disable MAC-label-setting ### on a system which supports it, which is probably undesirable. ### ##disable_mac = false ## ### ### By default, fam will use SAT (Security Audit Trails) if it's sysconf'd on, ### and will ignore this flag if the system doesn't support SAT. The only use ### for this flag is to disable auditing on a system which supports it, which ### is probably undesirable. ### ##disable_audit = false