Commit 0f30a709 authored by Libor Peltan's avatar Libor Peltan

doc: note of keymgr uid

parent cfd6fd03
......@@ -73,6 +73,15 @@ configuration file.
\fB\-d\fP, \fB\-\-dir\fP \fIpath\fP
Use specified KASP database path and default configuration.
.UNINDENT
.sp
\fBNOTE:\fP
.INDENT 0.0
.INDENT 3.5
Keymgr runs with the same user privileges as configured for knotd. For example,
if keymgr is run as root, but the configured user is knot,
it won\(aqt be able to read files (PEM files, KASP db, ...) readable only by root.
.UNINDENT
.UNINDENT
.SS Commands
.INDENT 0.0
.TP
......
......@@ -50,6 +50,11 @@ Config options
**-d**, **--dir** *path*
Use specified KASP database path and default configuration.
.. NOTE::
Keymgr runs with the same user privileges as configured for knotd. For example,
if keymgr is run as root, but the configured :ref:`user<server_user>` is knot,
it won't be able to read files (PEM files, KASP db, ...) readable only by root.
Commands
........
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment