On Thu, Feb 11, 2016 at 02:55:15 +0100, Juliusz Chroboczek wrote:

> > 1) Is there a recommended method for tunnelling to this?
> >
> > dair-1120:~ d$ ssh -W ip6-localhost:33123 admin@wherever
> 
> That's what we do.
> 
> > 2) It is worrisome that now random users on the box can make changes
> > without root perms.
> 
> Uh-huh.  Shall we make -g read-only, and require -G for changes?  Unix
> sockets instead of TCP?  Require a password?
> 
-g for read-only, -G for read-write, and support for unix domain sockets
seems like a good combination...

Cheers,
Julien

_______________________________________________
Babel-users mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/babel-users

Reply via email to