<html><body>
<p>One more thing...<br>
<br>
It turns out that the firewall assumption also reveals a disconnect between the DCL and DLT documents. The disconnect turns out to be based on the infrastructure/environment vs. single machine view. The security part of the DCL spec covers the single machine view. The DLT spec is making assumptions about the DCL environment which are valid but not covered by the DCL spec. I know that we had this discussion when deciding on the capabilities for the DCL spec.<br>
<br>
Should there be a third document that talks about the expected DCL infrastructure and the security components that it will have? Not all of the security components (firewall appliance or firewall capability in the router, mail scanning, etc.) will necessarily be Linux based but could be. Should the environmental assumptions implicit to the DLT document be made explicit in that document?<br>
<br>
Emily<br>
<br>
Emily Ratliff<br>
IBM Linux Technology Center, Security<br>
CISSP #51839<br>
512-838-0409 (T/L 678-0409)<br>
emilyr@us.ibm.com</body></html>