Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 393 / 512

certServer.admin.certificate
373
16.7.1.1. Operations
Operations Description
read View ACL resources and list ACL resources, ACL listing
evaluators, and ACL evaluator types.
modify Add, delete, and update ACL evaluators.
16.7.1.2. Default ACIs
allow (read) group="Administrators" || group="Certificate Manager Agents"
|| group="Data Recovery Manager Agents"
|| group="Online Certificate Status Manager Agents"
|| group=Auditors
allow (modify) group="Administrators"
Agents, administrators, and auditors can read ACL configuration; only administrators can modify ACL
configuration.
16.7.2. certServer.admin.certificate
This entry is associated with the CA administration interface and is only available during the
configuration of the target of evaluation (TOE); it is unavailable after the CA is running.
16.7.2.1. Operations
Operations Description
import Import a CA administrator certificate.
16.7.2.2. Default ACIs
allow (import) user="anybody"
Anyone can import a certificate.
16.7.3. certServer.admin.request.enrollment
This entry is associated with the CA administration interface and is only available during the
configuration of the target of evaluation (TOE); it is unavailable after the CA is running. Allow or deny
submit, read, or execute operations for an administrator enrollment request.
16.7.3.1. Operations
Operations Description
submit Submit a CA administrator certificate enrollment request.
read View a CA administrator certificate enrollment request.