[SSSD] [PATCH] MAN: Document that krb5 directories can only be created as private

Stephen Gallagher sgallagh at redhat.com
Tue Oct 29 17:03:33 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/29/2013 12:57 PM, Lukas Slebodnik wrote:
> On (29/10/13 17:27), Jakub Hrozek wrote:
>> When I started writing 1.11.2 release notes, I realized that we
>> did not amend documentation when we removed the ability to create
>> public krb5 directories.
> 
>> From aaacd6ed5f46df6a23d54553c1ce48a5c61e2626 Mon Sep 17 00:00:00
>> 2001 From: Jakub Hrozek <jhrozek at redhat.com> Date: Tue, 29 Oct
>> 2013 17:26:39 +0100 Subject: [PATCH] MAN: Document that krb5
>> directories can only be created as private
>> 
>> --- src/man/sssd-krb5.5.xml | 13 +++---------- 1 file changed, 3
>> insertions(+), 10 deletions(-)
>> 
>> diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml 
>> index
>> e8d693aa8ad6ff11c88ee0e9d5d7445c610baad9..cda99abb5878c963ce5791467defd463c7781226
>> 100644 --- a/src/man/sssd-krb5.5.xml +++
>> b/src/man/sssd-krb5.5.xml @@ -137,16 +137,9 @@ <para> Directory
>> to store credential caches. All the substitution sequences of
>> krb5_ccname_template can -                            be used
>> here, too, except %d and %P. If the -
>> directory does not exist, it will be created. If %u, -
>> %U, %p or %h are used, a private directory belonging -
>> to the user is created. Otherwise, a public directory -
>> with restricted deletion flag (aka sticky bit, as -
>> described in -                            <citerefentry> -
>> <refentrytitle>chmod</refentrytitle> -
>> <manvolnum>1</manvolnum> -
>> </citerefentry> for details) is created. +
>> be used here, too, except %d and %P. +
>> The directory is created as private, owned by the +
>> user, with permissions set to 0700.
> 
> Stephen suggested on IRC following sentence.
> 
> The directory is created as private and owned by the user, with 
> permissions set to 0700 (unusable by any other user).
> 

Sorry, on a second reading, just drop "(unusable by any other user)".
It's redundant.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlJv6mUACgkQeiVVYja6o6OHQwCeNs/txJq+LsrCTPQm03iKSRep
8NMAn0wPx3lURdR/ZA5hJlX7lRyviAcr
=YHWK
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list