s6

Mirror/fork of https://skarnet.org/software/s6/
git clone https://ccx.te2000.cz/git/s6
Log | Files | Refs | README | LICENSE

s6-accessrules-fs-from-cdb.html (2351B)

      1 <html>
      2   <head>
      3     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
      4     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
      5     <meta http-equiv="Content-Language" content="en" />
      6     <title>s6: the s6-accessrules-fs-from-cdb program</title>
      7     <meta name="Description" content="s6: the s6-accessrules-fs-from-cdb program" />
      8     <meta name="Keywords" content="s6 s6-accessrules-fs-from-cdb tcp unix access control ipcrules tcprules cdb filesystem" />
      9     <!-- <link rel="stylesheet" type="text/css" href="//skarnet.org/default.css" /> -->
     10   </head>
     11 <body>
     12 
     13 <p>
     14 <a href="index.html">s6</a><br />
     15 <a href="//skarnet.org/software/">Software</a><br />
     16 <a href="//skarnet.org/">skarnet.org</a>
     17 </p>
     18 
     19 <h1> The <tt>s6-accessrules-fs-from-cdb</tt> program </h1>
     20 
     21 <p>
     22 <tt>s6-accessrules-fs-from-cdb</tt> decompiles a CDB database
     23 containing a ruleset suitable for
     24 <a href="s6-ipcserver-access.html">s6-ipcserver-access</a> or
     25 <a href="//skarnet.org/software/s6-networking/s6-tcpserver-access.html">s6-tcpserver-access</a> and
     26 that has been compiled with
     27 <a href="s6-accessrules-cdb-from-fs.html">s6-accessrules-cdb-from-fs</a>.
     28 </p>
     29 
     30 <h2> Interface </h2>
     31 
     32 <pre>
     33      s6-accessrules-fs-from-cdb <em>dir</em> <em>cdbfile</em>
     34 </pre>
     35 
     36 <ul>
     37  <li> s6-accessrules-fs-from-cdb decompiles the
     38 <a href="https://en.wikipedia.org/wiki/Cdb_(software)">CDB file</a>
     39 <em>cdbfile</em> into the directory <em>dir</em>, then exits 0. </li>
     40 </ul>
     41 
     42 <h2> Notes </h2>
     43 
     44 <ul>
     45  <li> <em>dir</em> must not exist prior to the decompilation. </li>
     46  <li> <em>dir</em> must be considered a work in progress as long as
     47 s6-accessrules-fs-from-cdb is running. It is only safe to use <em>dir</em>
     48 as a ruleset once the program has exited. </li>
     49  <li> If s6-accessrules-fs-from-cdb fails at some point, the partial
     50 arborescence at <em>dir</em> is removed. However, this doesn't happen if
     51 s6-accessrules-fs-from-cdb is interrupted by a signal. </li>
     52  <li> After the program successfully completes, if <em>cdbfile</em>
     53 was a suitable candidate for the <tt>-x</tt> option of
     54 <a href="s6-ipcserver-access.html">s6-ipcserver-access</a> or
     55 <a href="s6-tcpserver-access.html">s6-tcpserver-access</a>, then
     56 <em>dir</em> will be a suitable candidate for the <tt>-i</tt> option
     57 of the same program, implementing the same ruleset. </li>
     58 </ul>
     59 
     60 </body>
     61 </html>