S6-ACCESSRULES-FS-FROM-CDB(8)

🦋 NAME

okay so bestie, meet s6-accessrules-fs-from-cdb — it's the decompile girlie 💅. What she does is take a CDB[1] database (that's a ruleset compiled for s6-ipcserver-access(8) or s6-tcpserver-access(8), and built with s6-accessrules-cdb-from-fs(8)) and turn it back into a plain filesystem ruleset. Like un-zipping but for access rules, no cap. This page lives in the System Manager's Manual, section 8, iykyk ✨

🌸 SYNOPSIS

s6-accessrules-fs-from-cdb dir cdbfile

💖 DESCRIPTION

So s6-accessrules-fs-from-cdb decompiles the CDB[1] file cdbfile into the directory dir, then exits 0. That's it, that's the whole job, and she eats every time 🔥

💀 real talk though: dir must not exist prior to the decompilation. Like, it has to be brand new. She's not merging, she's creating.

Also highkey important: dir must be considered a work in progress for as long as s6-accessrules-fs-from-cdb is running. It is only safe to use dir as a ruleset once the program has exited. So don't go peeking at it mid-run, bestie, it's giving unfinished 🫶

If s6-accessrules-fs-from-cdb fails at some point, the partial arborescence at dir is removed. Cleanup queen ✨ But — and this is the sad part 😭 — that doesn't happen if s6-accessrules-fs-from-cdb is interrupted by a signal. So if you hit it with a signal, you get to clean up your own mess. Sorry, those are the rules.

After the program successfully completes: if cdbfile was a suitable candidate for the -x option of s6-ipcserver-access(8) or s6-tcpserver-access(8), then dir will be a suitable candidate for the -i option of the same program, implementing the same ruleset. So the round trip is genuinely faithful — iconic behavior 👑

⭐ SEE ALSO

• s6-accessrules-cdb-from-fs(8)
• s6-connlimit(8)
• s6-ioconnect(8)
• s6-ipcclient(8)
• s6-ipcserver(8)
• s6-ipcserver-access(8)
• s6-ipcserver-socketbinder(8)
• s6-ipcserverd(8)
• s6-tcpserver-access(8)
• [1] https://en.wikipedia.org/wiki/Cdb_(software)

This man page is ported from the authoritative documentation at: https://skarnet.org/software/s6/s6-accessrules-fs-from-cdb.html 🌈

👑 AUTHORS

• Laurent Bercot
• Alexis <flexibeast@gmail.com> (man page port)

🎀 cute lil sign-off: this page is from Debian, dated September 29, 2021, and the source/version line reads S6-ACCESSRULES-FS-FROM-CDB(8). Bye bestie, go decompile something pretty 💜