Re: Publickey subsystem draft posted

[Nicolas Williams <Nicolas.Williams%Sun.COM@localhost>]

On Wed, Jul 23, 2003 at 12:03:19PM -0700, Darren J Moffat wrote:
> Which needs to have the possibility of permission denied, so that an
> admin can setup a set of restrictions on a key that the user can't
> later override by using the public key subsystem to modify the attributes
> of an already existing key.

Also, the restrictions actually stored need not match the restrictions
listed in the add request.  This could allow sysadmins to force
restriction templates.

Nico
--