3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
4
<!ENTITY CONFNAME "mandos.conf">
5
5
<!ENTITY CONFPATH "<filename>/etc/mandos/mandos.conf</filename>">
6
<!ENTITY TIMESTAMP "2008-09-30">
6
<!ENTITY TIMESTAMP "2023-04-30">
7
7
<!ENTITY % common SYSTEM "common.ent">
20
20
<firstname>Björn</firstname>
21
21
<surname>Påhlsson</surname>
23
<email>belorn@fukt.bsnet.se</email>
23
<email>belorn@recompile.se</email>
27
27
<firstname>Teddy</firstname>
28
28
<surname>Hogeborn</surname>
30
<email>teddy@fukt.bsnet.se</email>
30
<email>teddy@recompile.se</email>
36
47
<holder>Teddy Hogeborn</holder>
37
48
<holder>Björn Påhlsson</holder>
58
69
<refsect1 id="description">
59
70
<title>DESCRIPTION</title>
61
The file &CONFPATH; is a simple configuration file for
72
The file &CONFPATH; is a configuration file for
62
73
<citerefentry><refentrytitle>mandos</refentrytitle>
63
74
<manvolnum>8</manvolnum></citerefentry>, and is read by it at
64
75
startup. The configuration file starts with <quote><literal
145
<term><option>use_dbus<literal> = </literal>{ <literal
146
>1</literal> | <literal>yes</literal> | <literal
147
>true</literal> | <literal>on</literal> | <literal
148
>0</literal> | <literal>no</literal> | <literal
149
>false</literal> | <literal>off</literal> }</option></term>
151
<xi:include href="mandos-options.xml" xpointer="dbus"/>
156
<term><option>use_ipv6<literal> = </literal>{ <literal
157
>1</literal> | <literal>yes</literal> | <literal
158
>true</literal> | <literal>on</literal> | <literal
159
>0</literal> | <literal>no</literal> | <literal
160
>false</literal> | <literal>off</literal> }</option></term>
162
<xi:include href="mandos-options.xml" xpointer="ipv6"/>
167
<term><option>restore<literal> = </literal>{ <literal
168
>1</literal> | <literal>yes</literal> | <literal
169
>true</literal> | <literal>on</literal> | <literal
170
>0</literal> | <literal>no</literal> | <literal
171
>false</literal> | <literal>off</literal> }</option></term>
173
<xi:include href="mandos-options.xml" xpointer="restore"/>
178
<term><option>statedir<literal> = </literal><replaceable
179
>DIRECTORY</replaceable></option></term>
181
<xi:include href="mandos-options.xml" xpointer="statedir"/>
186
<term><option>socket<literal> = </literal><replaceable
187
>NUMBER</replaceable></option></term>
189
<xi:include href="mandos-options.xml" xpointer="socket"/>
168
229
# A configuration example
170
address = 2001:db8:f983:bd0b:30de:ae4a:71f2:f672
231
address = fe80::aede:48ff:fe71:f6f2
173
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
234
priority = SECURE128:!CTYPE-X.509:+CTYPE-RAWPK:!RSA:!VERS-ALL:+VERS-TLS1.3:%PROFILE_ULTRA
174
235
servicename = Daena
239
statedir = /var/lib/mandos
175
240
</programlisting>
176
241
</informalexample>
179
244
<refsect1 id="see_also">
180
245
<title>SEE ALSO</title>
247
<citerefentry><refentrytitle>intro</refentrytitle>
248
<manvolnum>8mandos</manvolnum></citerefentry>,
182
249
<citerefentry><refentrytitle>gnutls_priority_init</refentrytitle
183
250
><manvolnum>3</manvolnum></citerefentry>,
184
251
<citerefentry><refentrytitle>mandos</refentrytitle>
213
280
The clients use IPv6 link-local addresses, which are
214
281
immediately usable since a link-local addresses is
215
automatically assigned to a network interfaces when it
282
automatically assigned to a network interface when it