summaryrefslogtreecommitdiff
path: root/docs/man/pklalockdown.xml
diff options
context:
space:
mode:
Diffstat (limited to 'docs/man/pklalockdown.xml')
-rw-r--r--docs/man/pklalockdown.xml136
1 files changed, 0 insertions, 136 deletions
diff --git a/docs/man/pklalockdown.xml b/docs/man/pklalockdown.xml
deleted file mode 100644
index 74e4f5d..0000000
--- a/docs/man/pklalockdown.xml
+++ /dev/null
@@ -1,136 +0,0 @@
-<?xml version="1.0"?>
-<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
- "http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd" [
-<!ENTITY version SYSTEM "../version.xml">
-]>
-<refentry id="pklalockdown.1" xmlns:xi="http://www.w3.org/2003/XInclude">
- <refentryinfo>
- <title>pklalockdown</title>
- <date>May 2009</date>
- <productname>polkit</productname>
- </refentryinfo>
-
- <refmeta>
- <refentrytitle>pklalockdown</refentrytitle>
- <manvolnum>1</manvolnum>
- <refmiscinfo class="version"></refmiscinfo>
- </refmeta>
-
- <refnamediv>
- <refname>pklalockdown</refname>
- <refpurpose>Configure lockdown for the Local Authority</refpurpose>
- </refnamediv>
-
- <refsynopsisdiv>
- <cmdsynopsis>
- <command>pklalockdown</command>
- <arg><option>--version</option></arg>
- <arg><option>--help</option></arg>
- </cmdsynopsis>
-
- <cmdsynopsis>
- <command>pklalockdown</command>
- <arg choice="plain">
- <option>--lockdown</option>
- <replaceable>action</replaceable>
- </arg>
- </cmdsynopsis>
-
- <cmdsynopsis>
- <command>pklalockdown</command>
- <arg choice="plain">
- <option>--remove-lockdown</option>
- <replaceable>action</replaceable>
- </arg>
- </cmdsynopsis>
-
- </refsynopsisdiv>
-
- <refsect1 id="pklalockdown-description">
- <title>DESCRIPTION</title>
- <para>
- <command>pklalockdown</command> is used to configure lockdown
- for the Local Authority.
- </para>
- <para>
- The effect of locking down an action is that administrator
- authentication is always needed in order for subjects to acquire
- the authorization for the action in question (and the subject
- has to be in an active session on a local console). The obtained
- authorization is temporary and as such typically expires five
- minutes after being obtained.
- </para>
- <para>
- To lock down <replaceable>action</replaceable> use the <option>--lockdown</option> option.
- To remove a lockdown for <replaceable>action</replaceable> use the <option>--remove-lockdown</option> option.
- </para>
- </refsect1>
-
- <refsect1 id="pklalockdown-required-auhtz">
- <title>REQUIRED AUTHORIZATIONS</title>
- <para>
- The <emphasis>org.freedesktop.policykit.localauthority.lockdown</emphasis>
- authorization is needed to add or remove lockdown. By default,
- this authorization requires administrator authentication and
- cannot be retained.
- </para>
- </refsect1>
-
- <refsect1 id="pklalockdown-impl-details">
- <title>IMPLEMENTATION DETAILS</title>
- <para>
- Lockdown is implemented through <filename>.pkla</filename>
- files. Locked down actions supersede other most other Local
- Authority configuration as the <filename>.pkla</filename> files
- are placed
- in <filename>/var/lib/polkit-1/localauthority90-mandatory.d</filename>.
- <para>
- </para>
- Programs checking authorizations can check whether an action is
- locked down via by checking
- the <emphasis>polkit.localauthority.lockdown</emphasis> key/value pair in
- the details of the authorization response.
- </para>
- </refsect1>
-
- <refsect1 id="pklalockdown-return-values">
- <title>RETURN VALUE</title>
- <para>
- On success <command>pklalockdown</command> returns 0. Otherwise a
- non-zero value is returned and a diagnostic message is printed
- on standard error.
- </para>
- </refsect1>
-
- <refsect1 id="pklalockdown-author"><title>AUTHOR</title>
- <para>
- Written by David Zeuthen <email>davidz@redhat.com</email> with
- a lot of help from many others.
- </para>
- </refsect1>
-
- <refsect1 id="pklalockdown-bugs">
- <title>BUGS</title>
- <para>
- Please send bug reports to either the distribution or the
- polkit-devel mailing list,
- see the link <ulink url="http://lists.freedesktop.org/mailman/listinfo/polkit-devel"/>
- on how to subscribe.
- </para>
- </refsect1>
-
- <refsect1 id="pklalockdown-see-also">
- <title>SEE ALSO</title>
- <para>
- <citerefentry>
- <refentrytitle>polkit</refentrytitle><manvolnum>8</manvolnum>
- </citerefentry>,
- <citerefentry>
- <refentrytitle>pkcheck</refentrytitle><manvolnum>1</manvolnum>
- </citerefentry>,
- <citerefentry>
- <refentrytitle>pklocalauthority</refentrytitle><manvolnum>8</manvolnum>
- </citerefentry>
- </para>
- </refsect1>
-</refentry>