Certserver.log.content; Certserver.log.content.signedaudit - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Appendix D. ACL Reference
allow (read) group="Administrators" || group="Auditors" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data Recovery Manager Agents" ||
group="Online Certificate Status Manager Agents";deny (modify) user=anybody
Operations Description
read View the value of the expirationTime parameter.
modify Modify the value of the expirationTime parameter.
Table D.10. certServer.log.configuration.signedAudit.expirationTime ACL Summary
D.2.10. certServer.log.content
Controls who can view the instance's logs.
allow (read) group="Administrators" || group="Certificate Manager Agents" ||
group="Registration Manager Agents" || group="Data Recovery Manager Agents" || group="Online
Certificate Status Manager Agents" || group="Auditors"
Operations Description
read View log content. List all logs.
Table D.11. certServer.log.content ACL Summary
D.2.11. certServer.log.content.signedAudit
Explicitly denies access to the signed audit logs for all users (except the auditor). The default setting
is:
deny (read) group="Administrators" || group="Certificate Manager Agents" ||
group="Registration Manager Agents" || group="Data Recovery Manager Agents" || group="Online
Certificate Status Manager Agents"
NOTE
All groups need to be specifically denied access to this log since they are given access to
all logs in the certServer.log.content ACL.
Operations Description
read View log content. List logs.
Table D.12. certServer.log.content.signedAudit ACL Summary
498