/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
1
<?xml version="1.0" encoding="UTF-8"?>
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
	"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
<!ENTITY COMMANDNAME "mandos-ctl">
237.7.586 by Teddy Hogeborn
mandos-ctl.xml: Clarify the conflicting nature of some options
5
<!ENTITY TIMESTAMP "2019-03-07">
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
6
<!ENTITY % common SYSTEM "common.ent">
7
%common;
8
]>
9
10
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
11
  <refentryinfo>
12
    <title>Mandos Manual</title>
13
    <!-- NWalsh’s docbook scripts use this to generate the footer: -->
14
    <productname>Mandos</productname>
15
    <productnumber>&version;</productnumber>
16
    <date>&TIMESTAMP;</date>
17
    <authorgroup>
18
      <author>
19
	<firstname>Björn</firstname>
20
	<surname>Påhlsson</surname>
21
	<address>
237.11.2 by Teddy Hogeborn
Change "fukt.bsnet.se" to "recompile.se" throughout.
22
	  <email>belorn@recompile.se</email>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
23
	</address>
24
      </author>
25
      <author>
26
	<firstname>Teddy</firstname>
27
	<surname>Hogeborn</surname>
28
	<address>
237.11.2 by Teddy Hogeborn
Change "fukt.bsnet.se" to "recompile.se" throughout.
29
	  <email>teddy@recompile.se</email>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
30
	</address>
31
      </author>
32
    </authorgroup>
33
    <copyright>
34
      <year>2010</year>
237.7.14 by Teddy Hogeborn
Update copyright year to "2011" wherever appropriate.
35
      <year>2011</year>
237.7.92 by Teddy Hogeborn
Updated year in copyright notices.
36
      <year>2012</year>
237.7.326 by Teddy Hogeborn
Update copyright year.
37
      <year>2013</year>
38
      <year>2014</year>
39
      <year>2015</year>
237.7.355 by Teddy Hogeborn
Update copyright year.
40
      <year>2016</year>
237.7.447 by Teddy Hogeborn
Update copyright year to 2017
41
      <year>2017</year>
237.7.471 by Teddy Hogeborn
Update copyright year to 2018
42
      <year>2018</year>
237.7.517 by Teddy Hogeborn
Update copyright year to 2019
43
      <year>2019</year>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
44
      <holder>Teddy Hogeborn</holder>
45
      <holder>Björn Påhlsson</holder>
46
    </copyright>
47
    <xi:include href="legalnotice.xml"/>
48
  </refentryinfo>
49
  
50
  <refmeta>
51
    <refentrytitle>&COMMANDNAME;</refentrytitle>
52
    <manvolnum>8</manvolnum>
53
  </refmeta>
54
  
55
  <refnamediv>
56
    <refname><command>&COMMANDNAME;</command></refname>
57
    <refpurpose>
237.7.411 by Teddy Hogeborn
mandos-ctl: Implement --dump-json option
58
      Control or query the operation of the Mandos server
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
59
    </refpurpose>
60
  </refnamediv>
61
  
62
  <refsynopsisdiv>
63
    <cmdsynopsis>
64
      <command>&COMMANDNAME;</command>
237.7.587 by Teddy Hogeborn
mandos-ctl.xml: Move most normal command to top of synopsis
65
      <group>
66
	  <arg choice="plain"><option>--verbose</option></arg>
67
	  <arg choice="plain"><option>-v</option></arg>
68
	  <sbr/>
69
	  <arg choice="plain"><option>--dump-json</option></arg>
70
	  <arg choice="plain"><option>-j</option></arg>
71
      </group>
72
      <group>
73
	<arg rep='repeat' choice='plain'>
74
	  <replaceable>CLIENT</replaceable>
75
	</arg>
76
      </group>
77
    </cmdsynopsis>
78
    <cmdsynopsis>
79
      <command>&COMMANDNAME;</command>
237.7.411 by Teddy Hogeborn
mandos-ctl: Implement --dump-json option
80
      <group choice="req">
81
	<group>
82
	  <arg choice="plain"><option>--enable</option></arg>
83
	  <arg choice="plain"><option>-e</option></arg>
84
	  <sbr/>
85
	  <arg choice="plain"><option>--disable</option></arg>
86
	  <arg choice="plain"><option>-d</option></arg>
87
	</group>
88
	<sbr/>
89
	<group>
90
	  <arg choice="plain"><option>--bump-timeout</option></arg>
91
	  <arg choice="plain"><option>-b</option></arg>
92
	</group>
93
	<sbr/>
94
	<group>
95
	  <arg choice="plain"><option>--start-checker</option></arg>
96
	  <arg choice="plain"><option>--stop-checker</option></arg>
97
	</group>
98
	<sbr/>
99
	<group>
100
	  <arg choice="plain"><option>--checker
101
	  <replaceable>COMMAND</replaceable></option></arg>
102
	  <arg choice="plain"><option>-c
103
	  <replaceable>COMMAND</replaceable></option></arg>
104
	</group>
105
	<sbr/>
106
	<group>
107
	  <arg choice="plain"><option>--timeout
108
	  <replaceable>TIME</replaceable></option></arg>
109
	  <arg choice="plain"><option>-t
110
	  <replaceable>TIME</replaceable></option></arg>
111
	</group>
112
	<sbr/>
113
	<group>
114
	  <arg choice="plain"><option>--extended-timeout
115
	  <replaceable>TIME</replaceable></option></arg>
116
	</group>
117
	<sbr/>
118
	<group>
119
	  <arg choice="plain"><option>--interval
120
	  <replaceable>TIME</replaceable></option></arg>
121
	  <arg choice="plain"><option>-i
122
	  <replaceable>TIME</replaceable></option></arg>
123
	</group>
124
	<sbr/>
125
	<group>
126
	  <arg choice="plain"><option>--approve-by-default</option
127
          ></arg>
128
	  <sbr/>
129
	  <arg choice="plain"><option>--deny-by-default</option></arg>
130
	</group>
131
	<sbr/>
132
	<group>
133
	  <arg choice="plain"><option>--approval-delay
134
	  <replaceable>TIME</replaceable></option></arg>
135
	</group>
136
	<sbr/>
137
	<group>
138
	  <arg choice="plain"><option>--approval-duration
139
	  <replaceable>TIME</replaceable></option></arg>
140
	</group>
141
	<sbr/>
142
	<group>
143
	  <arg choice="plain"><option>--host
144
	  <replaceable>STRING</replaceable></option></arg>
145
	  <arg choice="plain"><option>-H
146
	  <replaceable>STRING</replaceable></option></arg>
147
	</group>
148
	<sbr/>
149
	<group>
150
	  <arg choice="plain"><option>--secret
151
	  <replaceable>FILENAME</replaceable></option></arg>
152
	  <arg choice="plain"><option>-s
153
	  <replaceable>FILENAME</replaceable></option></arg>
154
	</group>
155
	<sbr/>
156
	<group>
157
	  <arg choice="plain"><option>--approve</option></arg>
158
	  <arg choice="plain"><option>-A</option></arg>
159
	  <sbr/>
160
	  <arg choice="plain"><option>--deny</option></arg>
161
	  <arg choice="plain"><option>-D</option></arg>
162
	</group>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
163
      </group>
164
      <sbr/>
165
      <group choice="req">
166
	<arg choice="plain"><option>--all</option></arg>
167
	<arg choice="plain"><option>-a</option></arg>
168
	<arg rep='repeat' choice='plain'>
169
	  <replaceable>CLIENT</replaceable>
170
	</arg>
171
      </group>
172
    </cmdsynopsis>
173
    <cmdsynopsis>
174
      <command>&COMMANDNAME;</command>
175
      <group>
237.7.586 by Teddy Hogeborn
mandos-ctl.xml: Clarify the conflicting nature of some options
176
	<arg choice="plain"><option>--deny</option></arg>
177
	<arg choice="plain"><option>-D</option></arg>
178
      </group>
179
      <group choice="req">
180
	  <arg choice="plain"><option>--remove</option></arg>
181
	  <arg choice="plain"><option>-r</option></arg>
182
      </group>
183
      <group choice="req">
184
	<arg choice="plain"><option>--all</option></arg>
185
	<arg choice="plain"><option>-a</option></arg>
186
	<arg rep='repeat' choice='plain'>
187
	  <replaceable>CLIENT</replaceable>
188
	</arg>
189
      </group>
190
    </cmdsynopsis>
191
    <cmdsynopsis>
192
      <command>&COMMANDNAME;</command>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
193
      <group choice="req">
194
	<arg choice="plain"><option>--is-enabled</option></arg>
195
	<arg choice="plain"><option>-V</option></arg>
196
      </group>
197
      <arg choice='plain'><replaceable>CLIENT</replaceable></arg>
198
    </cmdsynopsis>
199
    <cmdsynopsis>
200
      <command>&COMMANDNAME;</command>
201
      <group choice="req">
202
	<arg choice="plain"><option>--help</option></arg>
203
	<arg choice="plain"><option>-h</option></arg>
204
      </group>
205
    </cmdsynopsis>
206
    <cmdsynopsis>
207
      <command>&COMMANDNAME;</command>
208
      <group choice="req">
209
	<arg choice="plain"><option>--version</option></arg>
210
	<arg choice="plain"><option>-v</option></arg>
211
      </group>
212
    </cmdsynopsis>
237.7.156 by Teddy Hogeborn
* Makefile (check): Also check mandos-ctl.
213
    <cmdsynopsis>
214
      <command>&COMMANDNAME;</command>
215
      <arg choice="plain"><option>--check</option></arg>
216
    </cmdsynopsis>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
217
  </refsynopsisdiv>
218
  
219
  <refsect1 id="description">
220
    <title>DESCRIPTION</title>
221
    <para>
237.7.411 by Teddy Hogeborn
mandos-ctl: Implement --dump-json option
222
      <command>&COMMANDNAME;</command> is a program to control or
223
      query the operation of the Mandos server
224
      <citerefentry><refentrytitle>mandos</refentrytitle><manvolnum
225
      >8</manvolnum></citerefentry>.
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
226
    </para>
227
    <para>
228
      This program can be used to change client settings, approve or
229
      deny client requests, and to remove clients from the server.
230
    </para>
231
  </refsect1>
232
  
233
  <refsect1 id="purpose">
234
    <title>PURPOSE</title>
235
    <para>
236
      The purpose of this is to enable <emphasis>remote and unattended
237
      rebooting</emphasis> of client host computer with an
238
      <emphasis>encrypted root file system</emphasis>.  See <xref
239
      linkend="overview"/> for details.
240
    </para>
241
  </refsect1>
242
  
243
  <refsect1 id="options">
244
    <title>OPTIONS</title>
245
    
246
    <variablelist>
247
      <varlistentry>
248
	<term><option>--help</option></term>
249
	<term><option>-h</option></term>
250
	<listitem>
251
	  <para>
252
	    Show a help message and exit
253
	  </para>
254
	</listitem>
255
      </varlistentry>
256
      
257
      <varlistentry>
258
	<term><option>--enable</option></term>
259
	<term><option>-e</option></term>
260
	<listitem>
261
	  <para>
262
	    Enable client(s).  An enabled client will be eligble to
263
	    receive its secret.
264
	  </para>
265
	</listitem>
266
      </varlistentry>
267
      
268
      <varlistentry>
269
	<term><option>--disable</option></term>
270
	<term><option>-d</option></term>
271
	<listitem>
272
	  <para>
273
	    Disable client(s).  A disabled client will not be eligble
274
	    to receive its secret, and no checkers will be started for
275
	    it.
276
	  </para>
277
	</listitem>
278
      </varlistentry>
279
      
280
      <varlistentry>
281
	<term><option>--bump-timeout</option></term>
282
	<listitem>
283
	  <para>
284
	    Bump the timeout of the specified client(s), just as if a
285
	    checker had completed successfully for it/them.
286
	  </para>
287
	</listitem>
288
      </varlistentry>
289
      
290
      <varlistentry>
291
	<term><option>--start-checker</option></term>
292
	<listitem>
293
	  <para>
294
	    Start a new checker now for the specified client(s).
295
	  </para>
296
	</listitem>
297
      </varlistentry>
298
      
299
      <varlistentry>
300
	<term><option>--stop-checker</option></term>
301
	<listitem>
302
	  <para>
303
	    Stop any running checker for the specified client(s).
304
	  </para>
305
	</listitem>
306
      </varlistentry>
307
      
308
      <varlistentry>
309
	<term><option>--remove</option></term>
310
	<term><option>-r</option></term>
311
	<listitem>
312
	  <para>
313
	    Remove the specified client(s) from the server.
314
	  </para>
315
	</listitem>
316
      </varlistentry>
317
      
318
      <varlistentry>
319
	<term><option>--checker
320
	<replaceable>COMMAND</replaceable></option></term>
321
	<term><option>-c
322
	<replaceable>COMMAND</replaceable></option></term>
323
	<listitem>
324
	  <para>
325
	    Set the <varname>checker</varname> option of the specified
326
	    client(s); see <citerefentry><refentrytitle
237.2.204 by Teddy Hogeborn
* mandos (ClientDBus.__init__): Bug fix: Translate "-" in client names
327
	    >mandos-clients.conf</refentrytitle><manvolnum
328
            >5</manvolnum></citerefentry>.
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
329
	  </para>
330
	</listitem>
331
      </varlistentry>
332
      
333
      <varlistentry>
334
	<term><option>--timeout
335
	<replaceable>TIME</replaceable></option></term>
336
	<term><option>-t
337
	<replaceable>TIME</replaceable></option></term>
338
	<listitem>
339
	  <para>
340
	    Set the <varname>timeout</varname> option of the specified
341
	    client(s); see <citerefentry><refentrytitle
237.2.204 by Teddy Hogeborn
* mandos (ClientDBus.__init__): Bug fix: Translate "-" in client names
342
	    >mandos-clients.conf</refentrytitle><manvolnum
343
            >5</manvolnum></citerefentry>.
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
344
	  </para>
345
	</listitem>
346
      </varlistentry>
24.1.179 by Björn Påhlsson
New feature:
347
348
      <varlistentry>
349
	<term><option>--extended-timeout
350
	<replaceable>TIME</replaceable></option></term>
351
	<listitem>
352
	  <para>
353
	    Set the <varname>extended_timeout</varname> option of the
354
	    specified client(s); see <citerefentry><refentrytitle
355
	    >mandos-clients.conf</refentrytitle><manvolnum
356
	    >5</manvolnum></citerefentry>.
357
	  </para>
358
	</listitem>
359
      </varlistentry>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
360
      
361
      <varlistentry>
362
	<term><option>--interval
363
	<replaceable>TIME</replaceable></option></term>
364
	<term><option>-i
365
	<replaceable>TIME</replaceable></option></term>
366
	<listitem>
367
	  <para>
237.2.204 by Teddy Hogeborn
* mandos (ClientDBus.__init__): Bug fix: Translate "-" in client names
368
	    Set the <varname>interval</varname> option of the
369
	    specified client(s); see <citerefentry><refentrytitle
370
	    >mandos-clients.conf</refentrytitle><manvolnum
371
            >5</manvolnum></citerefentry>.
372
	  </para>
373
	</listitem>
374
      </varlistentry>
375
      
376
      <varlistentry>
377
	<term><option>--approve-by-default</option></term>
378
	<term><option>--deny-by-default</option></term>
379
	<listitem>
380
	  <para>
381
	    Set the <varname>approved_by_default</varname> option of
382
	    the specified client(s) to <literal>True</literal> or
383
	    <literal>False</literal>, respectively; see
384
	    <citerefentry><refentrytitle
385
            >mandos-clients.conf</refentrytitle><manvolnum
386
            >5</manvolnum></citerefentry>.
387
	  </para>
388
	</listitem>
389
      </varlistentry>
390
      
391
      <varlistentry>
392
	<term><option>--approval-delay
393
	<replaceable>TIME</replaceable></option></term>
394
	<listitem>
395
	  <para>
396
	    Set the <varname>approval_delay</varname> option of the
397
	    specified client(s); see <citerefentry><refentrytitle
398
	    >mandos-clients.conf</refentrytitle><manvolnum
399
            >5</manvolnum></citerefentry>.
400
	  </para>
401
	</listitem>
402
      </varlistentry>
403
      
404
      <varlistentry>
405
	<term><option>--approval-duration
406
	<replaceable>TIME</replaceable></option></term>
407
	<listitem>
408
	  <para>
409
	    Set the <varname>approval_duration</varname> option of the
410
	    specified client(s); see <citerefentry><refentrytitle
411
	    >mandos-clients.conf</refentrytitle><manvolnum
412
            >5</manvolnum></citerefentry>.
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
413
	  </para>
414
	</listitem>
415
      </varlistentry>
416
      
417
      <varlistentry>
418
	<term><option>--host
419
	<replaceable>STRING</replaceable></option></term>
420
	<term><option>-H
421
	<replaceable>STRING</replaceable></option></term>
422
	<listitem>
423
	  <para>
424
	    Set the <varname>host</varname> option of the specified
425
	    client(s); see <citerefentry><refentrytitle
237.2.204 by Teddy Hogeborn
* mandos (ClientDBus.__init__): Bug fix: Translate "-" in client names
426
	    >mandos-clients.conf</refentrytitle><manvolnum
427
            >5</manvolnum></citerefentry>.
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
428
	  </para>
429
	</listitem>
430
      </varlistentry>
431
      
432
      <varlistentry>
433
	<term><option>--secret
434
	<replaceable>FILENAME</replaceable></option></term>
435
	<term><option>-s
436
	<replaceable>FILENAME</replaceable></option></term>
437
	<listitem>
438
	  <para>
439
	    Set the <varname>secfile</varname> option of the specified
440
	    client(s); see <citerefentry><refentrytitle
237.2.204 by Teddy Hogeborn
* mandos (ClientDBus.__init__): Bug fix: Translate "-" in client names
441
	    >mandos-clients.conf</refentrytitle><manvolnum
442
            >5</manvolnum></citerefentry>.
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
443
	  </para>
444
	</listitem>
445
      </varlistentry>
446
      
447
      <varlistentry>
448
	<term><option>--approve</option></term>
449
	<term><option>-A</option></term>
450
	<listitem>
451
	  <para>
452
	    Approve client(s) if currently waiting for approval.
453
	  </para>
454
	</listitem>
455
      </varlistentry>
456
      
457
      <varlistentry>
458
	<term><option>--deny</option></term>
459
	<term><option>-D</option></term>
460
	<listitem>
461
	  <para>
462
	    Deny client(s) if currently waiting for approval.
463
	  </para>
464
	</listitem>
465
      </varlistentry>
466
      
467
      <varlistentry>
468
	<term><option>--all</option></term>
469
	<term><option>-a</option></term>
470
	<listitem>
471
	  <para>
472
	    Make the client-modifying options modify <emphasis
473
	    >all</emphasis> clients.
474
	  </para>
475
	</listitem>
476
      </varlistentry>
477
      
478
      <varlistentry>
479
	<term><option>--verbose</option></term>
480
	<term><option>-v</option></term>
481
	<listitem>
482
	  <para>
483
	    Show all client settings, not just a subset.
484
	  </para>
485
	</listitem>
486
      </varlistentry>
487
      
488
      <varlistentry>
237.7.411 by Teddy Hogeborn
mandos-ctl: Implement --dump-json option
489
	<term><option>--dump-json</option></term>
490
	<term><option>-j</option></term>
491
	<listitem>
492
	  <para>
493
	    Dump client settings as JSON to standard output.
494
	  </para>
495
	</listitem>
496
      </varlistentry>
497
      
498
      <varlistentry>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
499
	<term><option>--is-enabled</option></term>
500
	<term><option>-V</option></term>
501
	<listitem>
502
	  <para>
503
	    Check if a single client is enabled or not, and exit with
504
	    a successful exit status only if the client is enabled.
505
	  </para>
506
	</listitem>
507
      </varlistentry>
508
      
237.7.156 by Teddy Hogeborn
* Makefile (check): Also check mandos-ctl.
509
      <varlistentry>
510
	<term><option>--check</option></term>
511
	<listitem>
512
	  <para>
513
	    Run self-tests.  This includes any unit tests, etc.
514
	  </para>
515
	</listitem>
516
      </varlistentry>
517
      
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
518
    </variablelist>
519
  </refsect1>
520
  
521
  <refsect1 id="overview">
522
    <title>OVERVIEW</title>
523
    <xi:include href="overview.xml"/>
524
    <para>
525
      This program is a small utility to generate new OpenPGP keys for
526
      new Mandos clients, and to generate sections for inclusion in
527
      <filename>clients.conf</filename> on the server.
528
    </para>
529
  </refsect1>
530
  
531
  <refsect1 id="exit_status">
532
    <title>EXIT STATUS</title>
533
    <para>
534
      If the <option>--is-enabled</option> option is used, the exit
535
      status will be 0 only if the specified client is enabled.
536
    </para>
537
  </refsect1>
538
  
237.7.369 by Teddy Hogeborn
Add bug reporting information to manual pages
539
  <refsect1 id="bugs">
540
    <title>BUGS</title>
541
    <xi:include href="bugs.xml"/>
542
  </refsect1>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
543
  
544
  <refsect1 id="example">
545
    <title>EXAMPLE</title>
546
    <informalexample>
547
      <para>
237.2.201 by Teddy Hogeborn
* mandos (Client.runtime_expansions): New attribute containing the
548
	To list all clients:
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
549
      </para>
550
      <para>
551
	<userinput>&COMMANDNAME;</userinput>
552
      </para>
553
    </informalexample>
237.2.201 by Teddy Hogeborn
* mandos (Client.runtime_expansions): New attribute containing the
554
    
555
    <informalexample>
556
      <para>
557
	To list <emphasis>all</emphasis> settings for the clients
558
        named <quote>foo1.example.org</quote> and <quote
559
        >foo2.example.org</quote>:
560
      </para>
561
      <para>
562
563
<!-- do not wrap this line -->
564
<userinput>&COMMANDNAME; --verbose foo1.example.org foo2.example.org</userinput>
565
566
      </para>
567
    </informalexample>
568
    
569
    <informalexample>
570
      <para>
571
	To enable all clients:
572
      </para>
573
      <para>
574
	<userinput>&COMMANDNAME; --enable --all</userinput>
575
      </para>
576
    </informalexample>
577
    
578
    <informalexample>
579
      <para>
580
	To change timeout and interval value for the clients
581
        named <quote>foo1.example.org</quote> and <quote
582
        >foo2.example.org</quote>:
583
      </para>
584
      <para>
585
586
<!-- do not wrap this line -->
587
<userinput>&COMMANDNAME; --timeout="5m" --interval="1m" foo1.example.org foo2.example.org</userinput>
588
589
      </para>
590
    </informalexample>
591
    
592
    <informalexample>
593
      <para>
594
	To approve all clients currently waiting for it:
595
      </para>
596
      <para>
237.2.204 by Teddy Hogeborn
* mandos (ClientDBus.__init__): Bug fix: Translate "-" in client names
597
	<userinput>&COMMANDNAME; --approve --all</userinput>
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
598
      </para>
599
    </informalexample>
600
  </refsect1>
601
  
602
  <refsect1 id="security">
603
    <title>SECURITY</title>
604
    <para>
605
      This program must be permitted to access the Mandos server via
606
      the D-Bus interface.  This normally requires the root user, but
607
      could be configured otherwise by reconfiguring the D-Bus server.
608
    </para>
609
  </refsect1>
610
  
611
  <refsect1 id="see_also">
612
    <title>SEE ALSO</title>
613
    <para>
237.7.41 by Teddy Hogeborn
* Makefile (DOCS): Added "intro.8mandos".
614
      <citerefentry><refentrytitle>intro</refentrytitle>
615
      <manvolnum>8mandos</manvolnum></citerefentry>,
237.2.197 by teddy at bsnet
* mandos-ctl.xml: New.
616
      <citerefentry><refentrytitle>mandos</refentrytitle>
617
      <manvolnum>8</manvolnum></citerefentry>,
618
      <citerefentry><refentrytitle>mandos-clients.conf</refentrytitle>
619
      <manvolnum>5</manvolnum></citerefentry>,
620
      <citerefentry><refentrytitle>mandos-monitor</refentrytitle>
621
      <manvolnum>8</manvolnum></citerefentry>
622
    </para>
623
  </refsect1>
624
  
625
</refentry>
626
<!-- Local Variables: -->
627
<!-- time-stamp-start: "<!ENTITY TIMESTAMP [\"']" -->
628
<!-- time-stamp-end: "[\"']>" -->
629
<!-- time-stamp-format: "%:y-%02m-%02d" -->
630
<!-- End: -->