From a6d0e490209638605b17b0bdc66ad03d36909dae Mon Sep 17 00:00:00 2001 From: Daiki Ueno Date: Thu, 5 Apr 2018 11:14:39 +0200 Subject: modules: Add option to control module visibility from proxy This enables to control whether a module will be loaded from the proxy module. The configuration reuses the "enable-in" and "disable-in" options, with a special literal "p11-kit-proxy" as the value. --- doc/manual/pkcs11.conf.xml | 2 ++ 1 file changed, 2 insertions(+) (limited to 'doc') diff --git a/doc/manual/pkcs11.conf.xml b/doc/manual/pkcs11.conf.xml index e94f9d1..c1e2cab 100644 --- a/doc/manual/pkcs11.conf.xml +++ b/doc/manual/pkcs11.conf.xml @@ -115,6 +115,7 @@ x-custom : text for other programs using p11-kit. The base name of the process executable should be used here, for example seahorse, ssh. + This option can also be used to control whether the module will be loaded by the proxy module. To enable loading only from the proxy module, specify p11-kit-proxy as the value. This is not a security feature. The argument is optional. If not present, then any process will load the module. @@ -127,6 +128,7 @@ x-custom : text other programs using p11-kit. The base name of the process executable should be used here, for example firefox, thunderbird-bin. + This option can also be used to control whether the module will be loaded by the proxy module. To disable loading from the proxy module, specify p11-kit-proxy as the value. This is not a security feature. The argument is optional. If not present, then any process will load the module. -- cgit v1.1