Skip to main content

grants_acl

Function grants_acl 

Source
pub fn grants_acl(path: &Path) -> Result<Acl, String>
Expand description

The grants in a store, as an Acl file body.

Exposed for the choir-ssh shim, which enforces the same grants from a separate process and must not be able to disagree with the daemon about what they mean.

ยงErrors

Returns a message when the store cannot be read or does not parse. A missing file yields an empty table rather than an error: an ACL that grants nothing is the fail-closed answer, and refusing to start would take the SSH transport down with a file the daemon may simply not have written yet.