diff options
Diffstat (limited to 'sudoers/sudoOptions.rng')
-rw-r--r-- | sudoers/sudoOptions.rng | 73 |
1 files changed, 0 insertions, 73 deletions
diff --git a/sudoers/sudoOptions.rng b/sudoers/sudoOptions.rng deleted file mode 100644 index c87c02b..0000000 --- a/sudoers/sudoOptions.rng +++ /dev/null @@ -1,73 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<grammar xmlns="http://relaxng.org/ns/structure/1.0" - datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes" - xmlns:a="http://freeipa.org/xml/rng/ns/annotations/1.0"> - - <a:doc> Sudo options configuration (Defaults) </a:doc> - - <include href="options.rng"/> - - <start ns="http://freeipa.org/xml/rng/sudo/sudoOptions/1.0"> - <element name="sudoOptions"> - <ref name="options"/> - <!-- we can enclose anything --> - <!-- - NOTE: This allows only a single element to be enclosed. - The problem with allowing multiple elements is, how to - resolve conflicting configs? - - <sudoOptions ...> - <posixGroup name="wheel"> - <sudoers .../> - </posixGroup> - <posixGroup name="staff"> - <sudoers .../> - </posixGroup> - <posixUser name="user"> - <sudoers .../> - </posixGroup> - </sudoOptions> - - If user foo is in both groups, and (e.g.) conflicting - options are used in the <sudoers> element, which applies? - For the <posixUser> case, we could simply say it is more - specific and it wins, but not so easy for the groups case. - - NOTE: This is a general problem. Even if sudoOptions allows only - a single element, what about other grouping elements? - --> - <ref name="anyElement"/> - </element> - </start> - - <!-- - This allows anything in another namespace. - The way nsName works requires that this be in each schema (grammar); - it cannot be included. - --> - <define name="anyElement"> - <zeroOrMore> - <element> - <anyName> - <except> - <nsName/> - <nsName ns=""/> -<!-- - <nsName ns="http://freeipa.org/xml/rng/sudo/sudoOptions/1.0"/> ---> - </except> - </anyName> - <zeroOrMore> - <choice> - <attribute> - <anyName/> - </attribute> - <text/> - <ref name="anyElement"/> - </choice> - </zeroOrMore> - </element> - </zeroOrMore> - </define> -</grammar> - |