TIMEBOX(7)                                                          TIMEBOX(7)



NAME
       timebox - allow or deny op access within a defined period

SYNOPSIS
       timebox  [-P  pid] [-C config] [-f file] [-g group] [-R root] [-u user]
       mnemonic program euid:egid cred_type:cred
       timebox -h|-H
       timebox -V

DESCRIPTION
       This jacket restricts an escalated access to a known  window  of  time.
       That  is  to say, the access must begin within a fixed time-of-day win-
       dow.

       The program may be specified as a jacket or helmet.  The helmet case is
       much more common.

OPTIONS
       This  program  takes  all the op provided options, but actually doesn't
       look at any of them (other than -P).

ENVIRONMENT
       Like any jacket, most of the configuration is passed from  op  via  the
       environment.

       $TIMEBOX_INSIDE=box-spec
              The current time-of-day is compared to the box-spec (see below),
              is the time is outside the box the escalation is denied.

       $TIMEBOX_FORBID=box-spec
              The current time-of-day is compared to the box-spec (see below),
              is the time is inside the box the escalation is denied.

       $TIMEBOX_WARN=sorry
              Set a more imaginative deny message.

       $TIMEBOX_REVEAL=prefix
              The standard reveal logic, see op-jacket(7).

BOX SPECIFICATIONS
       A  box-spec  is  a  comma  separated list of comparisons of strftime(3)
       expanded strings.  Each comparison may be described in term of a  chain
       of  relational operators (<, >, <=, >=), possibly prefixed by a logical
       negation operator (!):
            [! *] format [rel-op format ...]
       Note that a constant value is a valid format.  Comma  is  taken  as  an
       "or".

       This example expression limits access to days 2..14 of the month:
            1<%e<15

EXAMPLES
       These are example from the command-line:

       /usr/local/libexec/jacket/timebox -V
              Output only the version of the program, then exit.

       /usr/local/libexec/jacket/timebox -H
              Output a summary of the environment expected.
       jacket=/usr/local/libexec/jacket/timebox
       $TIMEBOX_INSIDE=0<%H<=3
              This escalation must be run before 04:00 local time.

       helmet=/usr/local/libexec/jacket/timebox
       $TIMEBOX_FORBID=%b=Feb,%j=366
              This  escalation  may not be run in February, or the Dec 31 of a
              leap year.  Note that months  and  days  of  week  (English,  at
              least) are converted to numbers for you.

AUTHOR
       K S Braunsdorf, from the Non-Player Character Guild
       op at-not-a-spammer ksb dot npcguild.org.nopinks

SEE ALSO
       op(1l), op-jacket(7l), exit(3)



                                     LOCAL                          TIMEBOX(7)

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | ENVIRONMENT | BOX SPECIFICATIONS | EXAMPLES | AUTHOR | SEE ALSO