1
# gpgconf.conf - configuration for gpgconf
2
#----------------------------------------------------------------------
3
# This file is read by gpgconf(1) to setup defaults for all or
4
# specified users and groups. It may be used to change the hardwired
5
# defaults in gpgconf and to enforce certain values for the various
6
# GnuPG related configuration files.
8
# Empty lines and comment lines, indicated by a hash mark as first non
9
# white space character, are ignored. The line is separated by white
10
# space into fields. The first field is used to match the user or
11
# group and must start at the first column, the file is processes
12
# sequential until a matching rule is found. A rule may contain
13
# several lines; continuation lines are indicated by a indenting them.
16
# <key>|WS <component> <option> ["["<flag>"]"] [<value>]
18
# Examples for the <key> field:
19
# foo - Matches the user "foo".
20
# foo: - Matches the user "foo".
21
# foo:staff - Matches the user "foo" or the group "staff".
22
# :staff - Matches the group "staff".
23
# * - Matches any user.
24
# All other variants are not defined and reserved for future use.
26
# <component> and <option> are as specified by gpgconf.
27
# <flag> may be one of:
28
# default - Delete the option so that the default is used.
29
# no-change - Mark the field as non changeable by gpgconf.
30
# change - Mark the field as changeable by gpgconf.
34
# :staff gpg-agent allow-mark-trusted [change]
35
# gpg-agent min-passphrase-len 6
37
# * gpg-agent min-passphrase-len [no-change] 8
38
# gpg-agent min-passphrase-nonalpha [no-change] 1
39
# gpg-agent max-passphrase-days [no-change] 700
40
# gpg-agent enable-passphrase-history [no-change]
41
# gpg-agent enforce-passphrase-constraints [default]
42
# gpg-agent enforce-passphrase-constraints [no-change]
43
# gpg-agent max-cache-ttl [no-change] 10800
44
# gpg-agent max-cache-ttl-ssh [no-change] 10800
45
# gpg-agent allow-mark-trusted [default]
46
# gpg-agent allow-mark-trusted [no-change]
49
# All users in the group "staff" are allowed to change the value for
50
# --allow-mark-trusted; gpgconf's default is not to allow a change
51
# through its interface. When "gpgconf --apply-defaults" is used,
52
# "allow-mark-trusted" will get enabled and "min-passphrase-len" set
53
# to 6. All other users are not allowed to change
54
# "min-passphrase-len" and "allow-mark-trusted". When "gpgconf
55
# --apply-defaults" is used for them, "min-passphrase-len" is set to
56
# 8, "allow-mark-trusted" deleted from the config file and
57
# "enable-ocsp" is put into the config file of gpgsm. The latter may
58
# be changed by any user.
59
#-------------------------------------------------------------------
added
removed
doc/examples/gpgconf.conf
