| < afs-backend Changes | Russ Allbery > Software > Orphaned Software > afs-backend | afs-backend-acl Changes > |
(Generate a remctl ACL from the afs-backend ACL)
afs-backend-acl [output]
The afs-backend program has its own ACL file that specifies exactly what each user can do, and can also take PTS groups instead of just lists of users. This is more precise than the remctl ACL file is capable of being, but for security we also want to limit the ability to even run that script to only those people who could actually do something with it.
This script generates, from the afs-backend ACL file, a remctl ACL files that just lists all the Kerberos principals of anyone who could possibly do anything with the afs-backend script.
The expected location of the ACL file describing which users have which volume release and creation permissions, as described in DESCRIPTION above.
The location to which the remctl ACL file is written.
Russ Allbery <rra@stanford.edu>
Copyright 2002, 2003, 2005 Board of Trustees, Leland Stanford Jr. University.
This program is free software; you may redistribute it and/or modify it under the same terms as Perl itself.
afs-backend(1), pts(1)
The current version of this program is available from the afs-backend web page at <http://www.eyrie.org/~eagle/software/afs-backend/>.
| < afs-backend Changes | Russ Allbery > Software > Orphaned Software > afs-backend | afs-backend-acl Changes > |