/usr/share/pacemaker/acls-2.0.rng is in pacemaker-common 1.1.14-2ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 | <?xml version="1.0" encoding="UTF-8"?>
<grammar xmlns="http://relaxng.org/ns/structure/1.0"
datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
<start>
<optional>
<ref name="element-acls"/>
</optional>
</start>
<define name="element-acls">
<element name="acls">
<zeroOrMore>
<choice>
<element name="acl_target">
<attribute name="id"><text/></attribute>
<zeroOrMore>
<element name="role">
<attribute name="id"><data type="IDREF"/></attribute>
</element>
</zeroOrMore>
</element>
<element name="acl_group">
<!-- Here 'id' is the name of a unix group -->
<attribute name="id"><data type="ID"/></attribute>
<zeroOrMore>
<element name="role">
<attribute name="id"><data type="IDREF"/></attribute>
</element>
</zeroOrMore>
</element>
<element name="acl_role">
<attribute name="id"><data type="ID"/></attribute>
<optional>
<attribute name="description"><text/></attribute>
</optional>
<zeroOrMore>
<ref name="element-permission"/>
</zeroOrMore>
</element>
</choice>
</zeroOrMore>
</element>
</define>
<define name="element-permission">
<element name="acl_permission">
<attribute name="id"><data type="ID"/></attribute>
<attribute name="kind">
<choice>
<value>read</value>
<value>write</value>
<value>deny</value>
</choice>
</attribute>
<choice>
<attribute name="xpath"><text/></attribute>
<!-- reference is already sufficiently specific without 'object-type' -->
<attribute name="reference"><data type="IDREF"/></attribute>
<group>
<!-- Use 'object-type' to avoid conflicting with the 'tag' configuration concept -->
<attribute name="object-type"><text/></attribute>
<optional>
<!--
does not make sense with anything other than object-type
xpath and reference are already sufficiently specific
-->
<attribute name="attribute"><text/></attribute>
</optional>
</group>
</choice>
<optional>
<attribute name="description"><text/></attribute>
</optional>
</element>
</define>
</grammar>
|