diff options
| author | Daiki Ueno <dueno@redhat.com> | 2018-04-05 11:14:39 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2018-04-06 10:59:44 +0200 |
| commit | a6d0e490209638605b17b0bdc66ad03d36909dae (patch) | |
| tree | ac139785aaedd85f53bbad79d90adf8c7c9cf733 /doc/manual | |
| parent | de963b96929b9da61916a0c43b4ac4c34a39e238 (diff) | |
modules: Add option to control module visibility from proxy
This enables to control whether a module will be loaded from the proxy
module. The configuration reuses the "enable-in" and "disable-in"
options, with a special literal "p11-kit-proxy" as the value.
Diffstat (limited to 'doc/manual')
| -rw-r--r-- | doc/manual/pkcs11.conf.xml | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/doc/manual/pkcs11.conf.xml b/doc/manual/pkcs11.conf.xml index e94f9d1..c1e2cab 100644 --- a/doc/manual/pkcs11.conf.xml +++ b/doc/manual/pkcs11.conf.xml @@ -115,6 +115,7 @@ x-custom : text for other programs using p11-kit. The base name of the process executable should be used here, for example <literal>seahorse, ssh</literal>.</para> + <para>This option can also be used to control whether the module will be loaded by <link linkend="sharing">the proxy module</link>. To enable loading only from the proxy module, specify <literal>p11-kit-proxy</literal> as the value.</para> <para>This is not a security feature. The argument is optional. If not present, then any process will load the module.</para> </listitem> @@ -127,6 +128,7 @@ x-custom : text other programs using p11-kit. The base name of the process executable should be used here, for example <literal>firefox, thunderbird-bin</literal>.</para> + <para>This option can also be used to control whether the module will be loaded by <link linkend="sharing">the proxy module</link>. To disable loading from the proxy module, specify <literal>p11-kit-proxy</literal> as the value.</para> <para>This is not a security feature. The argument is optional. If not present, then any process will load the module.</para> </listitem> |