|
From: Chris E. <cem...@ch...> - 2000-10-09 11:56:12
|
On Saturday, 7 Oct 2000, Jeff Dike wrote: > epa...@up... said: > > Many sysadmins (myself included) get very nervous when users ask > > for a suid helper. > > There's another possibility. The eth daemon can be made to > communicate with its peers on other boxes (which is a good idea in > its own right), and you could set up a virtual network that has > non-privileged daemons, except for one running as root on a machine > that no one cares about. That one would be the gateway to the > outside world for all the others. I think it would still be nice to avoid root altogether where possible. Seems to me that something like slirp (http://slirp.sourceforge.net/) could be useful here. Chris -- Chris Emerson, obsessed Cambridge juggler E-mail: cem...@ch... Web page: http://www.chiark.greenend.org.uk/~cemerson/ |