about summary refs log tree commit diff
path: root/doc/s6-ipcserver-access.html
diff options
context:
space:
mode:
authorLaurent Bercot <ska-skaware@skarnet.org>2019-02-04 14:11:35 +0000
committerLaurent Bercot <ska-skaware@skarnet.org>2019-02-04 14:11:35 +0000
commitfb6877e47d8a60b1e00ea55b2203589a43a610d0 (patch)
tree49af428a6b4aea0058737332f329ca834c86c06f /doc/s6-ipcserver-access.html
parentf0109069e88e99319bc23636b59fc03875c0a1c6 (diff)
downloads6-fb6877e47d8a60b1e00ea55b2203589a43a610d0.tar.gz
s6-fb6877e47d8a60b1e00ea55b2203589a43a610d0.tar.xz
s6-fb6877e47d8a60b1e00ea55b2203589a43a610d0.zip
Add -I option to s6-ipcserver-access
Diffstat (limited to 'doc/s6-ipcserver-access.html')
-rw-r--r--doc/s6-ipcserver-access.html5
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/s6-ipcserver-access.html b/doc/s6-ipcserver-access.html
index fad54bf..80b7503 100644
--- a/doc/s6-ipcserver-access.html
+++ b/doc/s6-ipcserver-access.html
@@ -30,7 +30,7 @@ the application program on the s6-ipcserver command line.
 <h2> Interface </h2>
 
 <pre>
-     s6-ipcserver-access [ -v <em>verbosity</em> ] [ -E | -e ] [ -l <em>localname</em> ] [ -i <em>rulesdir</em> | -x <em>rulesfile</em> ] <em>prog...</em>
+     s6-ipcserver-access [ -v <em>verbosity</em> ] [ -E | -e ] [ -l <em>localname</em> ] [ -I ] [ -i <em>rulesdir</em> | -x <em>rulesfile</em> ] <em>prog...</em>
 </pre>
 
 <ul>
@@ -95,6 +95,9 @@ This is the default. </li>
  <li> <tt>-l&nbsp;<em>localname</em></tt>&nbsp;: use <em>localname</em>
 as the value for the ${PROTO}LOCALPATH environment variable, instead of
 looking it up via getsockname(). </li>
+ <li> <tt>-I</tt>&nbsp;: accept identity connections. If a client connects
+with the same effective uid/gid pair as s6-ipcserver-access is running under,
+then the ruleset check is bypassed and the connection is accepted. </li>
  <li> <tt>-i&nbsp;<em>rulesdir</em></tt>&nbsp;: check client credentials
 against a filesystem-based database in the <em>rulesdir</em> directory. </li>
  <li> <tt>-x&nbsp;<em>rulesfile</em></tt>&nbsp;: check client credentials