[tac_plus] restrict by time of the day

Daniel Schmidt daniel.schmidt at wyo.gov
Mon Apr 10 20:14:22 UTC 2017


I've considered added it to do_auth before, but this is the first time
anybody expressed interest.

On Mon, Apr 10, 2017 at 11:43 AM, Asif Iqbal <vadud3 at gmail.com> wrote:

> On Mon, Apr 10, 2017 at 1:38 PM, heasley <heas at shrubbery.net> wrote:
>
> > Sat, Apr 08, 2017 at 06:29:46PM -0400, Asif Iqbal:
> > > I meant like below per tac_plus.conf man page
> > >
> > > cmd-match
> > >               Specify a command argument match.
> > >
> > >                   <permission> <regex>
> > >                   <permission> <regex>
> > >
> > > In the regex may be some expression that become NUL based on
> timestamp? I
> > > do not have any example.
> >
> > the regex does not match a timestamp; there is in fact no timestamp
> > involved at all.
> >
> > You can use do_auth.py or enforce the ToD via PAM.
> >
>
> I will take a look if it can provide option to allow/deny certain cmd.
>
> Thanks
>
> > [..]
>
>
>
> --
> Asif Iqbal
> PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://www.shrubbery.net/pipermail/tac_plus/
> attachments/20170410/31fb6bb1/attachment.html>
> _______________________________________________
> tac_plus mailing list
> tac_plus at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/tac_plus
>

-- 

E-Mail to and from me, in connection with the transaction 
of public business, is subject to the Wyoming Public Records 
Act and may be disclosed to third parties.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20170410/ae912991/attachment.html>


More information about the tac_plus mailing list