diff options
| author | Daniel Salzman <daniel.salzman@nic.cz> | 2019-02-26 13:05:29 +0100 |
|---|---|---|
| committer | Daniel Salzman <daniel.salzman@nic.cz> | 2019-02-26 13:05:29 +0100 |
| commit | 8ad4e8bdabfb3f5f03ed70330379765ca7b0d4d9 (patch) | |
| tree | 9b7d6523e69dded8e0734884ae21fb652e61dac3 | |
| parent | Merge branch 'unadjust_nces3_zonefile' into 'master' (diff) | |
| parent | doc: note of keymgr uid (diff) | |
| download | knot-8ad4e8bdabfb3f5f03ed70330379765ca7b0d4d9.tar.xz knot-8ad4e8bdabfb3f5f03ed70330379765ca7b0d4d9.zip | |
Merge branch 'doc_keymgr_uid' into 'master'
doc: note of keymgr uid
Closes #633
See merge request knot/knot-dns!984
| -rw-r--r-- | doc/man/keymgr.8in | 9 | ||||
| -rw-r--r-- | doc/man_keymgr.rst | 5 |
2 files changed, 14 insertions, 0 deletions
diff --git a/doc/man/keymgr.8in b/doc/man/keymgr.8in index 7d03cd05e..0042bb9d4 100644 --- a/doc/man/keymgr.8in +++ b/doc/man/keymgr.8in @@ -73,6 +73,15 @@ configuration file. \fB\-d\fP, \fB\-\-dir\fP \fIpath\fP Use specified KASP database path and default configuration. .UNINDENT +.sp +\fBNOTE:\fP +.INDENT 0.0 +.INDENT 3.5 +Keymgr runs with the same user privileges as configured for knotd. For example, +if keymgr is run as root, but the configured user is knot, +it won\(aqt be able to read files (PEM files, KASP db, ...) readable only by root. +.UNINDENT +.UNINDENT .SS Commands .INDENT 0.0 .TP diff --git a/doc/man_keymgr.rst b/doc/man_keymgr.rst index b8452afd9..8e8c649d1 100644 --- a/doc/man_keymgr.rst +++ b/doc/man_keymgr.rst @@ -50,6 +50,11 @@ Config options **-d**, **--dir** *path* Use specified KASP database path and default configuration. +.. NOTE:: + Keymgr runs with the same user privileges as configured for knotd. For example, + if keymgr is run as root, but the configured :ref:`user<server_user>` is knot, + it won't be able to read files (PEM files, KASP db, ...) readable only by root. + Commands ........ |