Security weakness whereby a "rogue client" can obtain the names ofĪll the files and directories on the system. Configuring fam this way opens a publically known Insecure_compatibility configuration option can be used to disableĪuthentication. SECURITYįor backward compatibility, the -C command-line option and If the local_only configuration option or -LĬommand-line option is used, xtab_verification has no effect. Will service remote requests without attempting to perform the xtab_verification If set to true, fam will check the list of exportedįilesystems when remote requests are received to verify that the requestsįall on filesystems which are exported to the requesting hosts. nfs_polling_interval This is the interval in seconds between polling files over an NFSįilesystem. Overridden by the -T command-line option. idle_timeout This is the time in seconds that fam will wait before exiting after its Option is ignored if fam is started by inetd. True is the same as using the -L command-line option. local_only If set to true, fam will ignore requests from remoteįams. If an untrusted user is not given in the configuration file,įam will write an error message to the system log and User, fam will not tell unauthenticated clients about the file'sĮxistence. untrusted_user This is the user name or UID of the user account which fam will useįor unauthenticated clients. Setting this option to true is the same as using the Security as described under SECURITY below. Insecure_compatibility If set to true, this disables authentication and reduces access usr/local/etc/fam.conf the -c command-line option can be used In addition to its command-line options, fam's behavior can also beĬontrolled through its configuration file. c config_file Read configuration information from the given file rather than theĭefault, which is /usr/local/etc/fam.conf. Insecure_compatibility flag in the configuration file. This disables authentication and reduces access This option is ignored if fam is started by This overrides the local_only flag in theĬonfiguration file. fam will only accept requests from clients running version Use the specified RPC program and version numbers. d Enable verbose messages and debug messages. f Remain in the foreground instead of spawning a child and exiting. A value ofĠ causes fam to wait indefinitely for new connections. Idle_timeout seconds after its last client disconnects. T idle_timeout Set the idle timeout interval to idle_timeout. t NFS_polling_interval Set the interval for polling files to NFS_polling_interval seconds. On NFS servers, nor does it disable polling of local files. Registered with portmap(1M) as performing the sgi_fam service. If fam cannot contact a remoteįam, it polls the files instead. If asked to monitorįiles on an NFS mounted filesystem, fam tries to use fam on Kernel through the imon(7M) pseudo device driver. Programmatic interface to fam see fam(3X).įam is informed of filesystem changes as they happen by the When fam detects changes to monitoredįiles, it notifies the appropriate application. fam is more efficient.Īpplications can request fam to monitor any files orĭirectories in any filesystem. Of fam, these applications and others like them are forced to poll theįilesystem to detect changes. Mailbox(1) present an up-to-date view of the filesystem. ĭESCRIPTION fam is a server that tracks changes to the filesystem and relays theseĬhanges to interested applications.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |