/mandos/trunk : revision 140

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-options.xml

Committer: Teddy Hogeborn
Date: 2008-09-02 13:04:42 UTC
Revision ID: teddy@fukt.bsnet.se-20080902130442-ytnjsmllaph18e20

* plugin-runner.xml (PLUGINS/WRITING PLUGINS): New section.
  (BUGS): Commented out.  There are no bugs.
  (EXAMPLE): Added lots of examples.
  (SECURITY): Added text.
  (SEE ALSO): Added "crypttab(5)" and "execve(2)".

Show diffs side-by-side

added added

removed removed

mandos-options.xml

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE simplesect PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"

<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">

<!--

If this is specified, the server will only announce the service

and listen to requests on network interface

<replaceable>IF</replaceable>. Default is to use all available

interfaces. <emphasis>Note:</emphasis> a failure to bind to the

specified interface is not considered critical, and the server

does not exit.

and listen to requests on the specified network interface.

Default is to use all available interfaces. <emphasis

>Note:</emphasis> a failure to bind to the specified

interface is not considered critical, and the server will not

exit, but instead continue normally.

</para>

If this option is used, the server will only listen to a specific

address. If a link-local address is specified, an interface

should be set, since a link-local address is only valid on a

single interface. By default, the server will listen to all

available addresses. Also, this must currently be an IPv6

address; an IPv4 address can only be specified using the

<quote><systemitem class="ipaddress">::FFFF:192.0.2.3</systemitem

></quote> format.

If this option is used, the server will only listen to the

specified IPv6 address. If a link-local address is specified, an

interface should be set, since a link-local address is only valid

on a single interface. By default, the server will listen to all

available addresses. If set, this must be an IPv6 address; an

IPv4 address can only be specified using IPv4-mapped IPv6 address

syntax: <quote><systemitem class="ipaddress"

>::FFFF:192.0.2.3</systemitem ></quote>.

</para>

If the server is run in debug mode, it will run in the foreground

and print a lot of debugging information. The default is

<emphasis>not</emphasis> to run in debug mode.

and print a lot of debugging information. The default is to

<emphasis>not</emphasis> run in debug mode.

</para>

GnuTLS priority string for the TLS handshake with the clients.

The default is

<quote><literal>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal></quote>.

See <citerefentry><refentrytitle>gnutls_priority_init

</refentrytitle><manvolnum>3</manvolnum></citerefentry> for the

syntax. <emphasis>Warning</emphasis>: changing this may make the

TLS handshake fail, making communication with clients impossible.

GnuTLS priority string for the <acronym>TLS</acronym> handshake

with the clients. The default is

<quote><literal>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal

></quote>. See <citerefentry>

<refentrytitle>gnutls_priority_init</refentrytitle>

<manvolnum>3</manvolnum></citerefentry> for the syntax.

<emphasis>Warning</emphasis>: changing this may make the

<acronym>TLS</acronym> handshake fail, making communication with

clients impossible.

</para>

Older »