summaryrefslogtreecommitdiffstats
path: root/sudoers/sudoOptions.rng
diff options
context:
space:
mode:
Diffstat (limited to 'sudoers/sudoOptions.rng')
-rw-r--r--sudoers/sudoOptions.rng73
1 files changed, 0 insertions, 73 deletions
diff --git a/sudoers/sudoOptions.rng b/sudoers/sudoOptions.rng
deleted file mode 100644
index c87c02b..0000000
--- a/sudoers/sudoOptions.rng
+++ /dev/null
@@ -1,73 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<grammar xmlns="http://relaxng.org/ns/structure/1.0"
- datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes"
- xmlns:a="http://freeipa.org/xml/rng/ns/annotations/1.0">
-
- <a:doc> Sudo options configuration (Defaults) </a:doc>
-
- <include href="options.rng"/>
-
- <start ns="http://freeipa.org/xml/rng/sudo/sudoOptions/1.0">
- <element name="sudoOptions">
- <ref name="options"/>
- <!-- we can enclose anything -->
- <!--
- NOTE: This allows only a single element to be enclosed.
- The problem with allowing multiple elements is, how to
- resolve conflicting configs?
-
- <sudoOptions ...>
- <posixGroup name="wheel">
- <sudoers .../>
- </posixGroup>
- <posixGroup name="staff">
- <sudoers .../>
- </posixGroup>
- <posixUser name="user">
- <sudoers .../>
- </posixGroup>
- </sudoOptions>
-
- If user foo is in both groups, and (e.g.) conflicting
- options are used in the <sudoers> element, which applies?
- For the <posixUser> case, we could simply say it is more
- specific and it wins, but not so easy for the groups case.
-
- NOTE: This is a general problem. Even if sudoOptions allows only
- a single element, what about other grouping elements?
- -->
- <ref name="anyElement"/>
- </element>
- </start>
-
- <!--
- This allows anything in another namespace.
- The way nsName works requires that this be in each schema (grammar);
- it cannot be included.
- -->
- <define name="anyElement">
- <zeroOrMore>
- <element>
- <anyName>
- <except>
- <nsName/>
- <nsName ns=""/>
-<!--
- <nsName ns="http://freeipa.org/xml/rng/sudo/sudoOptions/1.0"/>
--->
- </except>
- </anyName>
- <zeroOrMore>
- <choice>
- <attribute>
- <anyName/>
- </attribute>
- <text/>
- <ref name="anyElement"/>
- </choice>
- </zeroOrMore>
- </element>
- </zeroOrMore>
- </define>
-</grammar>
-