Lessons Learned Policy Dependencies

• psgconf defn of "policy":

  • any programmatic manipulation of config data
  • implicit rules, not explicit config data (unlike config statements from DataStore)

• Examples:

  • "all entries in hosts.allow must include a severity option to log connections to the local0 facility"
  • "all pseudousers for web-based services must have sudo access to restart the web server"