[SSSD] [PATCH] MAN: Document that krb5 directories can only be created as private
Jakub Hrozek
jhrozek at redhat.com
Tue Oct 29 17:05:15 UTC 2013
On Tue, Oct 29, 2013 at 01:03:33PM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 10/29/2013 12:57 PM, Lukas Slebodnik wrote:
> > On (29/10/13 17:27), Jakub Hrozek wrote:
> >> When I started writing 1.11.2 release notes, I realized that we
> >> did not amend documentation when we removed the ability to create
> >> public krb5 directories.
> >
> >> From aaacd6ed5f46df6a23d54553c1ce48a5c61e2626 Mon Sep 17 00:00:00
> >> 2001 From: Jakub Hrozek <jhrozek at redhat.com> Date: Tue, 29 Oct
> >> 2013 17:26:39 +0100 Subject: [PATCH] MAN: Document that krb5
> >> directories can only be created as private
> >>
> >> --- src/man/sssd-krb5.5.xml | 13 +++---------- 1 file changed, 3
> >> insertions(+), 10 deletions(-)
> >>
> >> diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml
> >> index
> >> e8d693aa8ad6ff11c88ee0e9d5d7445c610baad9..cda99abb5878c963ce5791467defd463c7781226
> >> 100644 --- a/src/man/sssd-krb5.5.xml +++
> >> b/src/man/sssd-krb5.5.xml @@ -137,16 +137,9 @@ <para> Directory
> >> to store credential caches. All the substitution sequences of
> >> krb5_ccname_template can - be used
> >> here, too, except %d and %P. If the -
> >> directory does not exist, it will be created. If %u, -
> >> %U, %p or %h are used, a private directory belonging -
> >> to the user is created. Otherwise, a public directory -
> >> with restricted deletion flag (aka sticky bit, as -
> >> described in - <citerefentry> -
> >> <refentrytitle>chmod</refentrytitle> -
> >> <manvolnum>1</manvolnum> -
> >> </citerefentry> for details) is created. +
> >> be used here, too, except %d and %P. +
> >> The directory is created as private, owned by the +
> >> user, with permissions set to 0700.
> >
> > Stephen suggested on IRC following sentence.
> >
> > The directory is created as private and owned by the user, with
> > permissions set to 0700 (unusable by any other user).
> >
>
> Sorry, on a second reading, just drop "(unusable by any other user)".
> It's redundant.
Thanks for the review, a new patch is attached.
-------------- next part --------------
>From a3390f8cd751a094073fa6ca76bdee32ee0ecd30 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Tue, 29 Oct 2013 17:26:39 +0100
Subject: [PATCH] MAN: Document that krb5 directories can only be created as
private
---
src/man/sssd-krb5.5.xml | 13 +++----------
1 file changed, 3 insertions(+), 10 deletions(-)
diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml
index e8d693aa8ad6ff11c88ee0e9d5d7445c610baad9..5619e9b7ecb77ca3727cdea96a281efba8750fc9 100644
--- a/src/man/sssd-krb5.5.xml
+++ b/src/man/sssd-krb5.5.xml
@@ -137,16 +137,9 @@
<para>
Directory to store credential caches. All the
substitution sequences of krb5_ccname_template can
- be used here, too, except %d and %P. If the
- directory does not exist, it will be created. If %u,
- %U, %p or %h are used, a private directory belonging
- to the user is created. Otherwise, a public directory
- with restricted deletion flag (aka sticky bit, as
- described in
- <citerefentry>
- <refentrytitle>chmod</refentrytitle>
- <manvolnum>1</manvolnum>
- </citerefentry> for details) is created.
+ be used here, too, except %d and %P.
+ The directory is created as private and owned
+ by the user, with permissions set to 0700.
</para>
<para>
Default: /tmp
--
1.8.3.1
More information about the sssd-devel
mailing list