/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to plugin-runner.xml

  • Committer: Teddy Hogeborn
  • Date: 2008-09-01 08:29:23 UTC
  • Revision ID: teddy@fukt.bsnet.se-20080901082923-i2liq6t7warmu9xe
* mandos.xml: Enclose "RAM" with <acronym>.
* overview.xml: - '' -

* plugin-runner.xml (DESCRIPTION): Improved wording.
  (PURPOSE): New section.
  (OPTIONS): Improved wording.
  (OVERVIEW, PLUGINS): New section.
  (FALLBACK): New empty placeholder section.

* plugins.d/password-prompt.xml: Enclose "RAM" with <acronym>.

Show diffs side-by-side

added added

removed removed

Lines of Context:
plugin-runner.xml
3
3
        "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
4
<!ENTITY VERSION "1.0">
5
5
<!ENTITY COMMANDNAME "plugin-runner">
6
 
<!ENTITY TIMESTAMP "2008-09-02">
 
6
<!ENTITY TIMESTAMP "2008-09-01">
7
7
]>
8
8
 
9
9
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
53
53
    <cmdsynopsis>
54
54
      <command>&COMMANDNAME;</command>
55
55
      <group rep="repeat">
56
 
        <arg choice="plain"><option>--global-env=<replaceable
 
56
        <arg choice="plain"><option>--global-envs=<replaceable
57
57
        >VAR</replaceable><literal>=</literal><replaceable
58
58
        >value</replaceable></option></arg>
59
 
        <arg choice="plain"><option>-G
 
59
        <arg choice="plain"><option>-e
60
60
        <replaceable>VAR</replaceable><literal>=</literal><replaceable
61
61
        >value</replaceable> </option></arg>
62
62
      </group>
63
63
      <sbr/>
64
64
      <group rep="repeat">
65
 
        <arg choice="plain"><option>--env-for=<replaceable
 
65
        <arg choice="plain"><option>--envs-for=<replaceable
66
66
        >PLUGIN</replaceable><literal>:</literal><replaceable
67
67
        >ENV</replaceable><literal>=</literal><replaceable
68
68
        >value</replaceable></option></arg>
69
 
        <arg choice="plain"><option>-E<replaceable>
 
69
        <arg choice="plain"><option>-f<replaceable>
70
70
        PLUGIN</replaceable><literal>:</literal><replaceable
71
71
        >ENV</replaceable><literal>=</literal><replaceable
72
72
        >value</replaceable> </option></arg>
83
83
        <arg choice="plain"><option>--options-for=<replaceable
84
84
        >PLUGIN</replaceable><literal>:</literal><replaceable
85
85
        >OPTIONS</replaceable></option></arg>
86
 
        <arg choice="plain"><option>-o<replaceable>
 
86
        <arg choice="plain"><option>-f<replaceable>
87
87
        PLUGIN</replaceable><literal>:</literal><replaceable
88
88
        >OPTIONS</replaceable> </option></arg>
89
89
      </group>
95
95
        <replaceable>PLUGIN</replaceable> </option></arg>
96
96
      </group>
97
97
      <sbr/>
98
 
      <group rep="repeat">
99
 
        <arg choice="plain"><option>--enable=<replaceable
100
 
        >PLUGIN</replaceable></option></arg>
101
 
        <arg choice="plain"><option>-e
102
 
        <replaceable>PLUGIN</replaceable> </option></arg>
103
 
      </group>
104
 
      <sbr/>
105
98
      <arg><option>--groupid=<replaceable
106
99
      >ID</replaceable></option></arg>
107
100
      <sbr/>
111
104
      <arg><option>--plugin-dir=<replaceable
112
105
      >DIRECTORY</replaceable></option></arg>
113
106
      <sbr/>
114
 
      <arg><option>--config-file=<replaceable
115
 
      >FILE</replaceable></option></arg>
116
 
      <sbr/>
117
107
      <arg><option>--debug</option></arg>
118
108
    </cmdsynopsis>
119
109
    <cmdsynopsis>
169
159
    <title>OPTIONS</title>
170
160
    <variablelist>
171
161
      <varlistentry>
172
 
        <term><option>--global-env
173
 
        <replaceable>VAR</replaceable><literal>=</literal><replaceable
174
 
        >value</replaceable></option></term>
175
 
        <term><option>-e
176
 
        <replaceable>VAR</replaceable><literal>=</literal><replaceable
177
 
        >value</replaceable></option></term>
178
 
        <listitem>
179
 
          <para>
180
 
            This option will add an environment variable setting to
181
 
            all plugins.  This will override any inherited environment
182
 
            variable.
183
 
          </para>
184
 
        </listitem>
185
 
      </varlistentry>
186
 
      
187
 
      <varlistentry>
188
 
        <term><option>--env-for
189
 
        <replaceable>PLUGIN</replaceable><literal>:</literal
190
 
        ><replaceable>ENV</replaceable><literal>=</literal
191
 
        ><replaceable>value</replaceable></option></term>
192
 
        <term><option>-f
193
 
        <replaceable>PLUGIN</replaceable><literal>:</literal
194
 
        ><replaceable>ENV</replaceable><literal>=</literal
195
 
        ><replaceable>value</replaceable></option></term>
196
 
        <listitem>
197
 
          <para>
198
 
            This option will add an environment variable setting to
199
 
            the <replaceable>PLUGIN</replaceable> plugin.  This will
200
 
            override any inherited environment variables or
201
 
            environment variables specified using
202
 
            <option>--global-env</option>.
203
 
          </para>
204
 
        </listitem>
205
 
      </varlistentry>
206
 
      
207
 
      <varlistentry>
208
162
        <term><option>--global-options
209
163
        <replaceable>OPTIONS</replaceable></option></term>
210
164
        <term><option>-g
249
203
      </varlistentry>
250
204
 
251
205
      <varlistentry>
252
 
        <term><option>--disable
 
206
        <term><option> --disable
253
207
        <replaceable>PLUGIN</replaceable></option></term>
254
208
        <term><option>-d
255
209
        <replaceable>PLUGIN</replaceable></option></term>
263
217
      </varlistentry>
264
218
 
265
219
      <varlistentry>
266
 
        <term><option>--enable
267
 
        <replaceable>PLUGIN</replaceable></option></term>
268
 
        <term><option>-e
269
 
        <replaceable>PLUGIN</replaceable></option></term>
270
 
        <listitem>
271
 
          <para>
272
 
            Re-enable the plugin named
273
 
            <replaceable>PLUGIN</replaceable>.  This is only useful to
274
 
            undo a previous <option>--disable</option> option, maybe
275
 
            from the config file.
276
 
          </para>
277
 
        </listitem>
278
 
      </varlistentry>
279
 
 
280
 
      <varlistentry>
281
220
        <term><option>--groupid
282
221
        <replaceable>ID</replaceable></option></term>
283
222
        <listitem>
317
256
      </varlistentry>
318
257
      
319
258
      <varlistentry>
320
 
        <term><option>--config-file
321
 
        <replaceable>FILE</replaceable></option></term>
322
 
        <listitem>
323
 
          <para>
324
 
            Specify a different file to read additional options from.
325
 
            See <xref linkend="files"/>.  Other command line options
326
 
            will override options specified in the file.
327
 
          </para>
328
 
        </listitem>
329
 
      </varlistentry>
330
 
      
331
 
      <varlistentry>
332
259
        <term><option>--debug</option></term>
333
260
        <listitem>
334
261
          <para>
399
326
      <filename>/lib/mandos/plugins.d</filename>, but this can be
400
327
      changed with the <option>--plugin-dir</option> option.  The
401
328
      plugins are started in parallel, and the first plugin to output
402
 
      a password <emphasis>and</emphasis> exit with a successful exit
403
 
      code will make this plugin-runner output the password from that
404
 
      plugin, stop any other plugins, and exit.
 
329
      a password and exit with a successful exit code will make this
 
330
      plugin-runner output that password, stop any other plugins, and
 
331
      exit.
405
332
    </para>
406
333
  </refsect1>
407
334
  
408
 
  <refsect1 id="fallback">
 
335
  <refsect1>
409
336
    <title>FALLBACK</title>
410
337
    <para>
411
 
      If no plugins succeed, this program will, as a fallback, ask for
412
 
      a password on the console using <citerefentry><refentrytitle
413
 
      >getpass</refentrytitle><manvolnum>3</manvolnum></citerefentry>,
414
 
      and output it.  This is not meant to be the normal mode of
415
 
      operation, as there is a separate plugin for getting a password
416
 
      from the console.
417
338
    </para>
418
339
  </refsect1>
419
 
  
420
340
  <refsect1 id="exit_status">
421
341
    <title>EXIT STATUS</title>
422
342
    <para>
423
 
      Exit status of this program is zero if no errors were
424
 
      encountered, and otherwise not.  The fallback (see <xref
425
 
      linkend="fallback"/>) may or may not have succeeded in either
426
 
      case.
427
 
    </para>
428
 
  </refsect1>
429
 
  
430
 
  <refsect1 id="environment">
431
 
    <title>ENVIRONMENT</title>
432
 
    <para>
433
 
      This program does not use any environment variables itself, it
434
 
      only passes on its environment to all the plugins.  The
435
 
      environment passed to plugins can be modified using the
436
 
      <option>--global-env</option> and <option>--env-for</option>
437
 
      optins.
438
 
    </para>
439
 
  </refsect1>
440
 
  
441
 
  <refsect1 id="files">
 
343
    </para>
 
344
  </refsect1>
 
345
 
 
346
  <refsect1 id="file">
442
347
    <title>FILES</title>
443
348
    <para>
444
 
      <variablelist>
445
 
        <varlistentry>
446
 
          <term><filename
447
 
          >/conf/conf.d/mandos/plugin-runner.conf</filename></term>
448
 
          <listitem>
449
 
            <para>
450
 
              Since this program will be run as a keyscript, there is
451
 
              little to no opportunity to pass command line arguments
452
 
              to it.  Therefore, it will <emphasis>also</emphasis>
453
 
              read this file and use its contents as
454
 
              whitespace-separated command line options.  Also,
455
 
              everything from a <quote>#</quote> character to the end
456
 
              of a line is ignored.
457
 
            </para>
458
 
            <para>
459
 
              This program is meant to run in the initial RAM disk
460
 
              environment, so that is where this file is assumed to
461
 
              exist.  The file does not need to exist in the normal
462
 
              file system.
463
 
            </para>
464
 
            <para>
465
 
              This file will be processed <emphasis>before</emphasis>
466
 
              the normal command line options, so the latter can
467
 
              override the former, if need be.
468
 
            </para>
469
 
            <para>
470
 
              This file name is the default; the file to read for
471
 
              arguments can be changed using the
472
 
              <option>--config-file</option> option.
473
 
            </para>
474
 
          </listitem>
475
 
        </varlistentry>
476
 
      </variablelist>
 
349
    </para>
 
350
  </refsect1>
 
351
 
 
352
  <refsect1 id="notes">
 
353
    <title>NOTES</title>
 
354
    <para>
477
355
    </para>
478
356
  </refsect1>
479
357
  
482
360
    <para>
483
361
    </para>
484
362
  </refsect1>
485
 
  
 
363
 
486
364
  <refsect1 id="examples">
487
365
    <title>EXAMPLE</title>
488
366
    <para>
489
367
    </para>
490
368
  </refsect1>
491
 
  
 
369
 
492
370
  <refsect1 id="security">
493
371
    <title>SECURITY</title>
494
372
    <para>
495
373
    </para>
496
374
  </refsect1>
497
 
  
 
375
 
498
376
  <refsect1 id="see_also">
499
377
    <title>SEE ALSO</title>
500
378
    <para>
508
386
      <manvolnum>8mandos</manvolnum></citerefentry>
509
387
    </para>
510
388
  </refsect1>
511
 
  
 
389
 
512
390
</refentry>
513
391
<!-- Local Variables: -->
514
392
<!-- time-stamp-start: "<!ENTITY TIMESTAMP [\"']" -->