require-fd 1-2 write
ignore-fd 3-
no-set-environment
- execute @sbindir@/cryptop
+ execute @bindir@/cryptop
+fi
+
+###--------------------------------------------------------------------------
+### Key administration operations.
+
+if ( glob service keys
+ & glob service-user @user@
+ & ( grep calling-user @pkgconfdir@/admin.users
+ | grep calling-group @pkgconfdir@/admin.groups
+ )
+ )
+ no-suppress-args
+ require-fd 0 read
+ require-fd 1-2 write
+ ignore-fd 3-
+ no-set-environment
+ execute @sbindir@/keys
fi
###--------------------------------------------------------------------------
require-fd 1-2 write
ignore-fd 3-
no-set-environment
- execute sh -c "case $# in \
- 1) \
- exec @bindir@/extract-profile \"$1\" \
- @pkgconfdir@/profile.d/ \
- .userv/cryptop-profile \
- ;; \
- *) \
- echo >&2 \"usage: cryptop-profile PROFILE\"; \
- exit 1 \
- ;; \
+ execute sh -c "case $# in \
+ 1) \
+ exec @bindir@/extract-profile \"$1\" \
+ @pkgconfdir@/profile.d/ \
+ .userv/cryptop-profile \
+ ;; \
+ *) \
+ echo >&2 \"usage: cryptop-profile PROFILE\"; \
+ exit 1 \
+ ;; \
esac" _
fi