aboutsummaryrefslogtreecommitdiff
path: root/config
diff options
context:
space:
mode:
Diffstat (limited to 'config')
-rw-r--r--config/wallet6
-rw-r--r--config/wallet-report.acl6
2 files changed, 10 insertions, 2 deletions
diff --git a/config/wallet b/config/wallet
index 06dc39d..19b86fa 100644
--- a/config/wallet
+++ b/config/wallet
@@ -1,7 +1,9 @@
# /etc/remctl/conf.d/wallet -- Run wallet-backend for the wallet system.
#
-# This is a remctld configuration fragment to run wallet-backend, which
-# implements the server side of the wallet system.
+# This is a remctld configuration fragment to run wallet-backend and
+# wallet-report, which implement the server side of the wallet system.
wallet store /usr/sbin/wallet-backend stdin=4 ANYUSER
wallet ALL /usr/sbin/wallet-backend ANYUSER
+
+wallet-report /usr/sbin/wallet-report /etc/remctl/acl/wallet-report
diff --git a/config/wallet-report.acl b/config/wallet-report.acl
new file mode 100644
index 0000000..d4c1aa6
--- /dev/null
+++ b/config/wallet-report.acl
@@ -0,0 +1,6 @@
+# /etc/remctl/acl/wallet-report -- ACL for wallet reporting.
+#
+# This is the ACL controlling who can run reports against the wallet
+# database using wallet-report via remctl. This backend doesn't allow any
+# modification of data or retrieval of stored data, but does allow
+# examination of all of the metadata in the wallet database.