This can be accomplished fairly easily by NFS exporting the part of the file
system containing the logs as read-only.  The developers would be able mount
the file system on their workstation, and look at everything that
permissions allow, but not be able to modify anything.

Mark Post

-----Original Message-----
From: Jeremy Warren [mailto:[EMAIL PROTECTED]
Sent: Monday, March 24, 2003 1:32 PM
To: [EMAIL PROTECTED]
Subject: Re: Read-Only Telnet


-snip-
The prime example that the developers keep bringing up is along these
lines:
User A calls in a problem which working with the app via their browser.The
developer wants to ssh into the host and issue a tail -f logfile while the
user is doing their thing to better understand the sequence of events
causing the problem.  With the current FTP method, it becomes difficult to
completely correlate User Action A with Log message B, especially if their
are other folks working just fine at the time.  rbash was one of the ones
that came up in my searches after your earlier post, but I haven't really
had time just yet to delve deeper into just how restricted, "restricted"
is.  (Specifically preventing the modifications of files you might
otherwise gain access to via world permissions).

Reply via email to