[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gentoo-user
Subject:    Re: [gentoo-user] portage nfs permissions
From:       Uwe Thiem <uwix () iway ! na>
Date:       2008-04-28 19:11:06
Message-ID: 200804282011.07115.uwix () iway ! na
[Download RAW message or body]

On Monday 28 April 2008, Albert Hopkins wrote:
> On Mon, 2008-04-28 at 12:03 -0500, Chris Frederick wrote:
> > Hi all,
> >
> > I'm trying to set up the portage directory to be hosted over nfs.
> > Everything is working great but I would like to increase the
> > security a
> > little.  I was wondering if there's an easy way to restrict
> > 'emerge --sync' to only work on the server, while still letting
> > all the nfs client machines download sources and emerge packages.
>
> Have clients only mount portage read-only and put distfiles in
> another fs and make it read-write.

Yes, this should work. I have got just one question: How does 
disabling "emerge --sync" from NFS clients improve security?

Uwe

-- 
Informal Linux Group Namibia:
http://www.linux.org.na/
SysEx (Pty) Ltd.:
http://www.SysEx.com.na/
-- 
gentoo-user@lists.gentoo.org mailing list

[prev in list] [next in list] [prev in thread] [next in thread]