Gentoo Archives: gentoo-user

From: Uwe Thiem <uwix@××××.na>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] portage nfs permissions
Date: Mon, 28 Apr 2008 19:11:16
Message-Id: 200804282011.07115.uwix@iway.na
In Reply to: Re: [gentoo-user] portage nfs permissions by Albert Hopkins
1 On Monday 28 April 2008, Albert Hopkins wrote:
2 > On Mon, 2008-04-28 at 12:03 -0500, Chris Frederick wrote:
3 > > Hi all,
4 > >
5 > > I'm trying to set up the portage directory to be hosted over nfs.
6 > > Everything is working great but I would like to increase the
7 > > security a
8 > > little. I was wondering if there's an easy way to restrict
9 > > 'emerge --sync' to only work on the server, while still letting
10 > > all the nfs client machines download sources and emerge packages.
11 >
12 > Have clients only mount portage read-only and put distfiles in
13 > another fs and make it read-write.
14
15 Yes, this should work. I have got just one question: How does
16 disabling "emerge --sync" from NFS clients improve security?
17
18 Uwe
19
20 --
21 Informal Linux Group Namibia:
22 http://www.linux.org.na/
23 SysEx (Pty) Ltd.:
24 http://www.SysEx.com.na/
25 --
26 gentoo-user@l.g.o mailing list

Replies

Subject Author
Re: [gentoo-user] portage nfs permissions Chris Frederick <cdf123@××××××.net>