summaryrefslogtreecommitdiff
path: root/config
diff options
context:
space:
mode:
authorRuss Allbery <rra@stanford.edu>2010-08-25 18:01:37 -0700
committerRuss Allbery <rra@stanford.edu>2010-08-25 18:01:37 -0700
commit5cc66fdef38a67e25850159c0c5282d6dc927178 (patch)
tree9636351ee75eacc2f74a989fd8fad712fe95e6ec /config
parentd46528a011f58881af9e9fb0c11de6422d469f17 (diff)
parente91c0b93355b28617f7c0d756026856762ece242 (diff)
Merge commit 'upstream/0.12' into debian
Diffstat (limited to 'config')
-rw-r--r--config/wallet6
-rw-r--r--config/wallet-report.acl6
2 files changed, 10 insertions, 2 deletions
diff --git a/config/wallet b/config/wallet
index 06dc39d..19b86fa 100644
--- a/config/wallet
+++ b/config/wallet
@@ -1,7 +1,9 @@
# /etc/remctl/conf.d/wallet -- Run wallet-backend for the wallet system.
#
-# This is a remctld configuration fragment to run wallet-backend, which
-# implements the server side of the wallet system.
+# This is a remctld configuration fragment to run wallet-backend and
+# wallet-report, which implement the server side of the wallet system.
wallet store /usr/sbin/wallet-backend stdin=4 ANYUSER
wallet ALL /usr/sbin/wallet-backend ANYUSER
+
+wallet-report /usr/sbin/wallet-report /etc/remctl/acl/wallet-report
diff --git a/config/wallet-report.acl b/config/wallet-report.acl
new file mode 100644
index 0000000..d4c1aa6
--- /dev/null
+++ b/config/wallet-report.acl
@@ -0,0 +1,6 @@
+# /etc/remctl/acl/wallet-report -- ACL for wallet reporting.
+#
+# This is the ACL controlling who can run reports against the wallet
+# database using wallet-report via remctl. This backend doesn't allow any
+# modification of data or retrieval of stored data, but does allow
+# examination of all of the metadata in the wallet database.