1. 04 9月, 2019 1 次提交
  2. 18 12月, 2018 1 次提交
  3. 05 11月, 2018 1 次提交
  4. 03 5月, 2018 1 次提交
  5. 16 10月, 2017 1 次提交
  6. 03 8月, 2017 2 次提交
  7. 14 11月, 2016 1 次提交
  8. 09 9月, 2016 1 次提交
    • J
      conf: Add new secret type "tls" · 13350a17
      John Ferlan 提交于
      Add a new secret usage type known as "tls" - it will handle adding the
      secret objects for various TLS objects that need to provide some sort
      of passphrase in order to access the credentials.
      
      The format is:
      
         <secret ephemeral='no' private='no'>
           <description>Sample TLS secret</description>
           <usage type='tls'>
             <name>mumblyfratz</name>
           </usage>
      </secret>
      
      Once defined and a passphrase set, future patches will allow the UUID
      to be set in the qemu.conf file and thus used as a secret for various
      TLS options such as a chardev serial TCP connection, a NBD client/server
      connection, and migration.
      Signed-off-by: NJohn Ferlan <jferlan@redhat.com>
      13350a17
  9. 15 7月, 2016 1 次提交
  10. 02 7月, 2016 1 次提交
    • J
      conf: Add new secret type "passphrase" · c8438010
      John Ferlan 提交于
      Add a new secret type known as "passphrase" - it will handle adding the
      secret objects that need a passphrase without a specific username.
      
      The format is:
      
         <secret ...>
           <uuid>...</uuid>
           ...
           <usage type='passphrase'>
             <name>mumblyfratz</name>
           </usage>
         </secret>
      Signed-off-by: NJohn Ferlan <jferlan@redhat.com>
      c8438010
  11. 04 9月, 2015 1 次提交
    • J
      examples: Add example polkit ACL rules · 29b51674
      Jiri Denemark 提交于
      Creating ACL rules is not exactly easy and existing examples are pretty
      simple. This patch adds a somewhat complex example which defines several
      roles. Admins can do everything, operators can do basic operations
      on any domain and several groups of users who act as operators but only
      on a limited set of domains.
      Signed-off-by: NJiri Denemark <jdenemar@redhat.com>
      29b51674
  12. 07 11月, 2014 1 次提交
  13. 05 10月, 2013 1 次提交
  14. 16 8月, 2013 1 次提交
  15. 10 8月, 2013 2 次提交
    • D
      b6c7e3bb
    • D
      Add documentation for access control system · da13f2c7
      Daniel P. Berrange 提交于
      This adds two new pages to the website, acl.html describing
      the general access control framework and permissions models,
      and aclpolkit.html describing the use of polkit as an
      access control driver.
      
      page.xsl is modified to support a new syntax
      
        <div id="include" filename="somefile.htmlinc"/>
      
      which will cause the XSL transform to replace that <div>
      with the contents of 'somefile.htmlinc'. We use this in
      the acl.html.in file, to pull the table of permissions
      for each libvirt object. This table is autogenerated
      from the enums in src/access/viraccessperms.h by the
      genaclperms.pl script.
      
      newapi.xsl is modified so that the list of permissions
      checks shown against each API will link to the description
      of the permissions in acl.html
      Signed-off-by: NDaniel P. Berrange <berrange@redhat.com>
      da13f2c7