diff options
Diffstat (limited to 'fml/etc/src/config.cf.en/acl.cf')
| -rw-r--r-- | fml/etc/src/config.cf.en/acl.cf | 242 |
1 files changed, 242 insertions, 0 deletions
diff --git a/fml/etc/src/config.cf.en/acl.cf b/fml/etc/src/config.cf.en/acl.cf new file mode 100644 index 00000000..b8c1068c --- /dev/null +++ b/fml/etc/src/config.cf.en/acl.cf @@ -0,0 +1,242 @@ +=head1 ACL + +# Descriptions: restrictions for post +# History: fml 4.0's PERMIT_POST_FROM + REJECT_ADDR +# Value: list of attributes ( +# permit_anyone +# permit_member_maps +# reject_system_accounts +# reject +# ) +# Examples: +post_restrictions = reject_system_accounts + permit_member_maps + reject + +# Descriptions: restrictions for command mail +# History: fml 4.0's PERMIT_COMMAND_FROM + REJECT_ADDR +# Value: list of attributes ( +# permit_anyone +# permit_commands_for_stranger +# permit_member_maps +# reject_system_accounts +# reject +# ) +# Examples: +command_restrictions = reject_system_accounts + permit_commands_for_stranger + permit_member_maps + reject + + +# Descriptions: restrictions for admin command mail +# History: fml 4.0's ? +# Value: list of attributes ( +# permit_anyone +# permit_admin_member_maps +# check_admin_member_password +# reject_system_accounts +# reject +# ) +# Examples: +# 1. if auth by members-admin only +# permit_admin_member_maps reject +# 2. password auth (members-admin + password) +# check_admin_member_password reject +# +admin_command_restrictions = reject_system_accounts + check_admin_member_password + reject + + +=head2 who can post + +# Descriptions: member list == primary address list who can post. +# fml (CUI,GUI,command mail) modifies this map. +# XXX some map e.g. uni.group is read only +# History: fml 4.0's $MEMBER_LIST +# Value: filename +# Examples: /var/spool/ml/elena/members +primary_member_map = file:$ml_home_dir/members + + +# Descriptions: all maps used to check member list. +# History: fml 4.0's $MEMBER_LIST + @MEMBER_LIST +# Type: +# Examples: +member_maps = $primary_member_map + $admin_member_maps + + + +=head2 recipients + + +# Descriptions: primary recipients list. +# fml (CUI,GUI,command mail) modifies this map. +# XXX some map e.g. uni.group is read only +# History: fml 4.0's $ACTIVE_LIST +# Value: filename +# Examples: /var/spool/ml/elena/recipients +primary_recipient_map = file:$ml_home_dir/recipients + + +# Descriptions: all maps used as recipient list. +# actives is added for backward compability. +# History: fml 4.0's $ACTIVE_LIST + @ACTIVE_LIST +# Value: a list of filenames +# Examples: file:$ml_home_dir/recipients +# unix.group:fml +recipient_maps = $primary_recipient_map + file:$ml_home_dir/actives + + +=head2 digest + + +# Descriptions: dummy +# History: none +# Value: filename +# Examples: +primary_digest_member_map = $primary_member_map + + +# Descriptions: dummy +# History: none +# Value: list of filenames +# Examples: +digest_member_maps = $primary_member_maps + + +# Descriptions: primary list of digest recipients. +# fml (CUI,GUI,command mail) modifies this map. +# History: In fml 4.0, options of $ACTIVE_LIST. +# Value: filename +# Examples: /var/spool/ml/elena/recipients-digest +primary_digest_recipient_map = file:$ml_home_dir/recipients-digest + + +# Descriptions: all maps of digest recipients. +# History: In fml 4.0, options of $ACTIVE_LIST. +# Value: a list of filenames +# Examples: file:$ml_home_dir/recipients-digest +# unix.group:fml +digest_recipient_maps = $primary_digest_recipient_map + + +=head2 remote administrators + +# Descriptions: list of remote administrators who has priviledge +# of admin command mail. +# fml (CUI,GUI,command mail) modifies this map. +# XXX some map e.g. uni.group is read only +# History: fml 4.0's $ADMIN_MEMBER_LIST +# Value: filename +# Examples: /var/spool/ml/elena/members-admin +primary_admin_member_map = file:$ml_home_dir/members-admin + + +# Descriptions: all remote administrator lists +# History: fml 4.0's $ADMIN_MEMBER_LIST + @ADMIN_MEMBER_LIST +# Type: +# Examples: +admin_member_maps = $primary_admin_member_map + + +# Descriptions: dummy +# History: none +# Value: file +# Examples: /var/spool/ml/elena/recipients-admin +primary_admin_recipient_map = file:$ml_home_dir/recipients-admin + + +# Descriptions: dummy +# History: none +# Value: file +# Examples: /var/spool/ml/elena/recipients-admin +admin_recipient_maps = $primary_admin_recipient_map + + +# Descriptions: primary password file to authenticate remote administrator +# in password auth (detault). +# fml (CUI,GUI,command mail) modifies this map. +# History: 4.0's $PASSWD_FILE +# Value: file +# Examples: /var/spool/ml/elena/etc/passwd +primary_admin_member_password_map = file:$ml_home_dir/etc/passwd-admin + + +# Descriptions: all password files. +# For backward compatibility, etc/passwd is included. +# History: none +# Value: +# Examples: +admin_member_password_maps = $primary_admin_member_password_map + file:$ml_home_dir/etc/passwd + + +=head2 moderator + +# Descriptions: primary list of moderators. +# fml (CUI,GUI,command mail) modifies this map. +# XXX some map e.g. uni.group is read only +# History: fml 4.0's $MODERATOR_MEMBER_LIST +# Value: filename +# Examples: /var/spool/ml/elena/members-moderator +primary_moderator_member_map = file:$ml_home_dir/members-moderator + + +# Descriptions: all list of moderator lists. +# History: $MODERATOR_MEMBER_LIST +# Value: +# Examples: +moderator_member_maps = $primary_moderator_member_map + + +# Descriptions: dummy +# History: none +# Value: file +# Examples: /var/spool/ml/elena/recipients-moderator +primary_moderator_recipient_map = file:$ml_home_dir/recipients-moderator + + +# Descriptions: dummy +# History: none +# Value: file +# Examples: /var/spool/ml/elena/recipients-moderator +moderator_recipient_maps = $primary_moderator_recipient_map + + +=head2 account based ACL + +# Descriptions: list of system accounts. +# Such an account cannot identify the individual. +# Moreover, it may be a robot program et.al. +# It may cause mail loop. +# Hence it is safe to reject such a sender. +# History: fml 4.0's $REJECT_ADDR +# Value: a list of strings +# Examples: see below +system_accounts = root + postmaster + MAILER-DAEMON + msgs + nobody + news + majordomo + listserv + listproc + \S+\-help + \S+\-subscribe + \S+\-unsubscribe + + + +# Descriptions: addresses fml uses: e.g. elena, elena-ctl +# libexec/error ignores these addresses. +# History: none +# Value: a list of strings +# Examples: (elena-ctl@fml.org elena-ctl@fml.org ...) +list_addresses = $address_for_post + $address_for_command + $maintainer |