[lkml]   [1996]   [Jun]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Ideas for v2.1
On Wed, 26 Jun 1996, Marc Unangst wrote:

> Hmm, I see what the problem is. You are talking about implementing
> packet accounting. I don't care about counting the packets; I'm
> concerned about doing access control. I want to prevent unauthorized
> users from making network connections to certain addresses or ports,

An idea this discussion has indicated to me is this: per-ip-port access
lists (or some control mechanism) would be a nice way to finalize making
users "news", "mail", etc., real sub-super-users. Allowing user "dns" to
attach to tcp/udp:53 any time, with no setuid-root shenanigans, would be
a very good thing to be able to do, from my point of view.

One of the (few 8^) good things that people remember from VMS (I would
not be one of these people) is the wide range of sub-systems, run by a
number of pseudo-super-users. (Please, someone correct e if I'm wrong.)
Being able to implement this sort of setup for network services would be
a good thing.


Todd Graham Lewis Core Engineering Mindspring Enterprises (Standard Disclaimers) (800) 719 4664, x2804

 \ /
  Last update: 2005-03-22 13:37    [W:0.037 / U:1.376 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site