Editing Acls - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Chapter 14. Managing Certificate System Users and Groups
user="BobC" || user!="JaneK"
To specify all users, provide the value anybody. For example:
user="anybody"
It is also possible to use regular expressions to specify the user names, such as using wildcard
characters like an asterisk (*). For example:
user="*johnson"
For more information on supported regular expression patterns, see
docs/api/java/util/regex/Pattern.html#sum.
The syntax to include an IP address in the ACL is ipaddress="ipaddress". The syntax to exclude
an ID address from the ACL is ipaddress!="ipaddress". An IP address is specified using its
numeric value; DNS values are not permitted. For example:
ipaddress="12.33.45.99"
ipaddress!="23.99.09.88"
The IP address can be an IPv4 address, as shown above, or IPv6 address. An IPv4 address has the
format n.n.n.n or n.n.n.n,m.m.m.m with the netmask. An IPv6 address uses a 128-bit namespace, with
the IPv6 address separated by colons and the netmask separated by periods. For example:
ipaddress="0:0:0:0:0:0:13.1.68.3"
It is also possible to use regular expressions to specify the IP address, such as using wildcard
characters like an asterisk (*). For example:
ipaddress="12.33.45.*"
For more information on supported regular expression patterns, see
docs/api/java/util/regex/Pattern.html#sum.
It is possible to create a string with more than one value by separating each value with two pipe
characters (||) with a space on either side. For example:
user="BobC" || group="Auditors" || group="Administrators"

14.6.2. Editing ACLs

ACLs are stored in the internal database and can only be modified in the administrative console.
To edit the existing ACLs:
1. Log into the administrative console.
2. Select Access Control List in the left navigation menu.
356
http://java.sun.com/j2se/1.4.2/
http://java.sun.com/j2se/1.4.2/