Skip to content

Commit ae41a86

Browse files
TravisEz13iSazonov
andauthored
Apply suggestions from code review
Co-Authored-By: Ilya <[email protected]>
1 parent c79c6d5 commit ae41a86

File tree

1 file changed

+15
-8
lines changed

1 file changed

+15
-8
lines changed

1-Draft/RFCXXXX-Policy.md

Lines changed: 15 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ Comments Due: 6/30/2019
1212

1313
## Motivation
1414

15-
Consumers, developers, and enterprise system administrators should be able to flexibly and reliable way to configure PowerShell 7.
15+
Consumers, developers, and enterprise system administrators should be able to flexibly and reliable configure PowerShell 7.
1616

1717
## Acknowledgement
1818

@@ -43,11 +43,11 @@ PowerShell 7 has hard-coded defaults for all configuration options.
4343

4444
The default values must be `secure-by-default`.
4545

46-
For release versions hard-coded defaults must be the same as ones in re-installed configuration files. For preview versions they may vary (ex., enable experimental features and so on).
46+
For release versions hard-coded defaults must be the same as ones in pre-installed configuration files. For preview versions they may vary (ex., enable experimental features and so on).
4747

4848
System configuration includes security sensitive setting,
4949
and failing to read those setting could result in an insecure system.
50-
So, if during startup, PowerShell 7 cannot read system configuration files,
50+
So, if during startup, PowerShell 7 cannot read files read from the Computer-Wide scope,
5151
it fails to startup.
5252

5353
If during startup PowerShell 7 cannot read user configuration files it uses _hardcoded_ defaults.
@@ -59,13 +59,13 @@ If during operation PowerShell 7 cannot read configuration files it continue to
5959
`PowerShell 7` settings are grouped into `Policy settings` and `Regular settings`.
6060
Regular settings are normal configuration settings.
6161
Regular settings can be treated as default and recommended values.
62-
Policy settings is high priority and overlap regular settings.
63-
Policy settings are used by administrators to centrally manage applications.
62+
Policy settings is high precedence.
63+
See [Precedence for Policy settings in descending order](#precedence-for-policy-settings-in-descending-order).
64+
Policy settings are used by administrators to centrally manage PowerShell and hosted applications.
6465

6566
| Location | Policy settings | Regular settings |
6667
|--------------|-----------------------------------------------------------|------------------------------------------------------------|
6768
| File section | "PowerShell": { "PolicySettings": {...} } | "PowerShell": { "RegularSettings": {...} } |
68-
| File section | "OtherPowerShellApplication": { "PolicySettings": {...} } | "OtherPowerShellApplication": { "RegularSettings": {...} } |
6969
| Registry key | Software\Policies\PowerShellCore | Software\PowerShellCore |
7070

7171
### Policy settings Setting Fall-Back
@@ -90,11 +90,11 @@ Because a configuration setting can be in several schemes, the setting wins acco
9090
| Scheme | Windows | Unix |
9191
|-----------------------------|------------------------------------------------------|------------------------------------------------------|
9292
| GPO -> Computer Policy | HKLM\Software\Policies\PowerShellCore | /etc/powershell/powershell.config.json |
93-
| GPO -> User Policy | HKCU\Software\Policies\PowerShellCore | See `Comment A` below |
93+
| GPO -> User Policy | HKCU\Software\Policies\PowerShellCore | See [`Comment A`](#comment-a) below |
9494
| File -> Computer-Wide | %ProgramFiles%/PowerShell/powershell.config.json | /etc/powershell/powershell.config.json |
9595
| File -> Application-Startup | pwsh -settingsfile `somepath/powershell.config.json` | pwsh -settingsfile `somepath/powershell.config.json` |
9696
| File -> User-Wide | %APPDATA%/powershell.config.json | %XDG_CONFIG_HOME%/powershell.config.json |
97-
| File -> Application-Wide | $apphome/powershell.config.json | $apphome/powershell.config.json |
97+
| File -> Application-Wide | $PSHome/powershell.config.json | $PSHome/powershell.config.json |
9898

9999
Defaults:
100100

@@ -207,6 +207,13 @@ I filed [#9632](https://github.com/PowerShell/PowerShell/issues/9632) on Updatab
207207

208208
### Automatically resolve Windows PowerShell policy conflicts
209209

210+
#### Motivation
211+
212+
This is a description of the alternative to [Policy settings Setting Fall-Back](#policy-settings-setting-fall-back).
213+
The main purpose of describing the alternative is to describe why it should not be pursued.
214+
215+
#### Description
216+
210217
We could attempt to resolve policy conflicts between PowerShell 7 policy and Windows PowerShell policy.
211218
This would make the `Precedence for Policy settings` not just a simple list but a complex set of rules that would not be easily understood. See [this conversation](https://github.com/PowerShell/PowerShell/issues/9309?#issuecomment-480643922).
212219

0 commit comments

Comments
 (0)