diff options
| author | Sumit Bose <sbose@nb.localdomain> | 2008-09-18 10:46:33 +0200 |
|---|---|---|
| committer | Sumit Bose <sbose@nb.localdomain> | 2008-09-18 10:46:33 +0200 |
| commit | 7bfb88bbf648000b4c2bf853a11ad2bd3f4b2d85 (patch) | |
| tree | b5e5bf2cd5768dd129d23fb76cb30304cd5315e5 /sudoers/sudoers.rng | |
| parent | 575f23f9ca93b302cb487c037edcbb8bf7554437 (diff) | |
| download | ipa_policy-7bfb88bbf648000b4c2bf853a11ad2bd3f4b2d85.tar.gz ipa_policy-7bfb88bbf648000b4c2bf853a11ad2bd3f4b2d85.tar.xz ipa_policy-7bfb88bbf648000b4c2bf853a11ad2bd3f4b2d85.zip | |
added fcusack's work
Diffstat (limited to 'sudoers/sudoers.rng')
| -rw-r--r-- | sudoers/sudoers.rng | 64 |
1 files changed, 64 insertions, 0 deletions
diff --git a/sudoers/sudoers.rng b/sudoers/sudoers.rng new file mode 100644 index 0000000..6787df7 --- /dev/null +++ b/sudoers/sudoers.rng @@ -0,0 +1,64 @@ +<?xml version="1.0" encoding="UTF-8"?> +<grammar xmlns="http://relaxng.org/ns/structure/1.0" + datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes" + xmlns:a="http://freeipa.org/xml/rng/ns/annotations/1.0"> + + <a:doc> Sudo configuration (/etc/sudoers) </a:doc> + + <include href="username.rng"/> + + <start ns="http://freeipa.org/xml/rng/sudo/sudoers/1.0"> + <element name="sudoers"> + + <oneOrMore> + <element name="command"> + <optional> + <element name="options"> + <ref name="options"/> + </element> + </optional> + + <element name="path"> + <text/> + </element> + + <zeroOrMore> + <element name="args"> + <text/> + </element> + </zeroOrMore> + + <zeroOrMore> + <element name="tag"> + <choice> + <value>NOPASSWD</value> + <value>PASSWD</value> + <value>NOEXEC</value> + <value>EXEC</value> + <value>SETENV</value> + <value>NOSETENV</value> + </choice> + </element> + </zeroOrMore> + +<!-- XXX actually needs to be user,group,netgroup --> + <zeroOrMore> + <element name="runas"> + <ref name="username_pattern"/> + </element> + </zeroOrMore> + + </element> <!-- command --> + </oneOrMore> + + </element> <!-- sudoers --> + </start> + <define name="options"> + <zeroOrMore> + <choice> + <attribute name="dummy_attribute"/> + </choice> + </zeroOrMore> + </define> +</grammar> + |