From eca5ddbb5abd00860e76e06d58d5d2f08a2806e5 Mon Sep 17 00:00:00 2001 From: Jose Bollo Date: Fri, 24 May 2019 16:49:02 +0200 Subject: Rework the initial definitions for agent @ Signed-off-by: Jose Bollo --- cynara.initial | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/cynara.initial b/cynara.initial index aa58c4b..6160474 100644 --- a/cynara.initial +++ b/cynara.initial @@ -1,4 +1,10 @@ # initial database for cynara -System * * * yes always -User * * * yes always +* * * * no always # explicit default rule: NO +* * @ADMIN * yes always # users of group @ADMIN can do anything +* * @NONE * no always # users of group @NONE can do nothing + +# root is in the group @ADMIN +* * 0 * @:%c:%s:@ADMIN:%p always +# Client of label System are in the group @ADMIN +System * * * @:%c:%s:@ADMIN:%p always -- cgit 1.2.3-korg