Certserver.log.configuration; Certserver.log.configuration.filename; Certserver.log.configuration.signedaudit.expirationtime - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Operations Description
read View the operating environment, LDAP configuration, SMTP configuration, server statistics, encryp
certificate nicknames, CA certificates, and all certificates for management.
modify Modify the settings for the LDAP database, SMTP, and encryption. Import certificates, trust and un
and delete certificates. Log all tokens and check token status. Run self-tests on demand. Get certi
name. Validate the certificate subject name, certificate key length, and certificate extension.
delete Remove any configuration entries or settings.
Table D.7. certServer.general.configuration ACL Summary
D.2.7. certServer.log.configuration
Controls access to the log configuration for the Certificate Manager, including changing the log
settings.
allow (read) group="Administrators" || group="Auditors" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data Recovery Manager Agents" ||
group="Online Certificate Status Manager Agents";allow (modify) group="Administrators"
Operations Description
read View log plug-in information, log plug-in configuration, and log instance configuration. List log plug
modify Add and delete log plug-ins and log instances. Modify log instances.
Table D.8. certServer.log.configuration ACL Summary
D.2.8. certServer.log.configuration.fileName
Restricts access to change the file name of a log for the instance.
allow (read) group="Administrators" || group="Auditors" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data Recovery Manager Agents" ||
group="Online Certificate Status Manager Agents";deny (modify) user=anybody
Operations Description
read View the value of the fileName parameter for a log instance.
modify Change the value of the fileName parameter for a log instance.
Table D.9. certServer.log.configuration.fileName ACL Summary
D.2.9. certServer.log.configuration.signedAudit.expirationTime
Restricts access to view or change the expiration time for the signed audit log. The default setting is:

certServer.log.configuration

497