On Mon, 2008-04-28 at 12:03 -0500, Chris Frederick wrote:
> Hi all,
> 
> I'm trying to set up the portage directory to be hosted over nfs. 
> Everything is working great but I would like to increase the security
> a 
> little.  I was wondering if there's an easy way to restrict 'emerge 
> --sync' to only work on the server, while still letting all the nfs 
> client machines download sources and emerge packages.

Have clients only mount portage read-only and put distfiles in another
fs and make it read-write.

Also you should disable locking on distfiles if you use it over NFS:
FEATURES=-distlocks.

 
-a

-- 
[email protected] mailing list

Reply via email to