s6: the s6-accessrules-fs-from-cdb program
Keywords: s6 s6-accessrules-fs-from-cdb tcp unix access control ipcrules tcprules cdb filesystem

s6
Software
skarnet.org

# The `s6-accessrules-fs-from-cdb` program

`s6-accessrules-fs-from-cdb` decompiles a CDB database containing a ruleset suitable for s6-ipcserver-access or s6-tcpserver-access and that has been compiled with s6-accessrules-cdb-from-fs.

## Interface

         s6-accessrules-fs-from-cdb dir cdbfile

- s6-accessrules-fs-from-cdb decompiles the CDB file cdbfile into the directory dir, then exits 0.

## Notes

- dir must not exist prior to the decompilation.
- dir must be considered a work in progress as long as s6-accessrules-fs-from-cdb is running. It is only safe to use dir as a ruleset once the program has exited.
- If s6-accessrules-fs-from-cdb fails at some point, the partial arborescence at dir is removed. However, this doesn't happen if s6-accessrules-fs-from-cdb is interrupted by a signal.
- After the program successfully completes, if cdbfile was a suitable candidate for the `-x` option of s6-ipcserver-access or s6-tcpserver-access, then dir will be a suitable candidate for the `-i` option of the same program, implementing the same ruleset.