mirror of
git://git.gnupg.org/gnupg.git
synced 2024-12-23 10:29:58 +01:00
76cd64a5ba
* tools/gpgconf.c (aApplyProfile): New. (opts): New command --apply-profile. (main): Implement that command. * tools/gpgconf-comp.c (option_check_validity): Add arg VERBATIM. (change_options_program): Ditto. (change_one_value): Ditto. (gc_component_change_options): Ditto. (gc_apply_profile): New. -- Here is an example for a profile --8<---------------cut here---------------start------------->8--- # foo.prf - Sample profile [gpg] compliance de-vs default-new-key-algo brainpoolP256r1+brainpoolP256r1 [gpgsm] enable-crl-checks [gpg-agent] default-cache-ttl 900 max-cache-ttl [] 3600 no-allow-mark-trusted no-allow-external-cache enforce-passphrase-constraints min-passphrase-len 9 min-passphrase-nonalpha 0 [dirmngr] keyserver hkp://keys.gnupg.net allow-ocsp --8<---------------cut here---------------end--------------->8--- Note that flags inside of brackets are allowed after the option name. The only defined flag for now is "[default]". In case the value starts with a bracket, it is possible to insert "[]" as a nop-flag. Signed-off-by: Werner Koch <wk@gnupg.org>
64 lines
2.8 KiB
Plaintext
64 lines
2.8 KiB
Plaintext
# gpgconf.conf - configuration for gpgconf
|
|
#----------------------------------------------------------------------
|
|
# This file is read by gpgconf(1) to setup defaults for all or
|
|
# specified users and groups. It may be used to change the hardwired
|
|
# defaults in gpgconf and to enforce certain values for the various
|
|
# GnuPG related configuration files.
|
|
#
|
|
# Empty lines and comment lines, indicated by a hash mark as first non
|
|
# white space character, are ignored. The line is separated by white
|
|
# space into fields. The first field is used to match the user or
|
|
# group and must start at the first column, the file is processed
|
|
# sequential until a matching rule is found. A rule may contain
|
|
# several lines; continuation lines are indicated by a indenting them.
|
|
#
|
|
# Syntax of a line:
|
|
# <key>|WS <component> <option> ["["<flag>"]"] [<value>]
|
|
#
|
|
# Examples for the <key> field:
|
|
# foo - Matches the user "foo".
|
|
# foo: - Matches the user "foo".
|
|
# foo:staff - Matches the user "foo" or the group "staff".
|
|
# :staff - Matches the group "staff".
|
|
# * - Matches any user.
|
|
# All other variants are not defined and reserved for future use.
|
|
#
|
|
# <component> and <option> are as specified by gpgconf.
|
|
# <flag> may be one of:
|
|
# default - Delete the option so that the default is used.
|
|
# no-change - Mark the field as non changeable by gpgconf.
|
|
# change - Mark the field as changeable by gpgconf.
|
|
#
|
|
# Example file:
|
|
#==========
|
|
# :staff gpg-agent allow-mark-trusted [change]
|
|
# gpg-agent min-passphrase-len 6
|
|
#
|
|
# * gpg-agent min-passphrase-len [no-change] 8
|
|
# gpg-agent min-passphrase-nonalpha [no-change] 1
|
|
# gpg-agent max-passphrase-days [no-change] 700
|
|
# gpg-agent enable-passphrase-history [no-change]
|
|
# gpg-agent enforce-passphrase-constraints [default]
|
|
# gpg-agent enforce-passphrase-constraints [no-change]
|
|
# gpg-agent max-cache-ttl [no-change] 10800
|
|
# gpg-agent max-cache-ttl-ssh [no-change] 10800
|
|
# gpg-agent allow-mark-trusted [default]
|
|
# gpg-agent allow-mark-trusted [no-change]
|
|
# gpgsm enable-ocsp
|
|
#===========
|
|
# All users in the group "staff" are allowed to change the value for
|
|
# --allow-mark-trusted; gpgconf's default is not to allow a change
|
|
# through its interface. When "gpgconf --apply-defaults" is used,
|
|
# "allow-mark-trusted" will get enabled and "min-passphrase-len" set
|
|
# to 6. All other users are not allowed to change
|
|
# "min-passphrase-len" and "allow-mark-trusted". When "gpgconf
|
|
# --apply-defaults" is used for them, "min-passphrase-len" is set to
|
|
# 8, "allow-mark-trusted" deleted from the config file and
|
|
# "enable-ocsp" is put into the config file of gpgsm. The latter may
|
|
# be changed by any user.
|
|
#-------------------------------------------------------------------
|
|
|
|
|
|
|
|
|