Re: Netowrk connectivity (was: segfault on font ...)
Andrew Suffield <[email protected]>
| Newsgroups | gmane.comp.graphics.y.devel |
|---|---|
| Message-ID | <[email protected]> |
On Tue, May 18, 2004 at 10:33:38PM -0400, Timothy C. Brown wrote: > So what's > your plan for using Y over a network - domain sockets forwarded over SSH > all the time? Roughly. There are many things you can do along these lines. [email protected]/y-proxy--main--0 contains a working first cut at one way it can be implemented (doesn't require ssh, or any form of shell access). It only took a couple days to write; this is really *easy* when you do it externally. It's also trivial to apply privilege separation here - whether with classical uid boundaries, or with something like selinux - and it multiplexes the secure channel, so per-client startup time beats the crap out of implementing it directly in the server. Adding something similar to ssh would not be hard, but I'm not touching the openssh code. -- .''`. ** Debian GNU/Linux ** | Andrew Suffield : :' : http://www.debian.org/ | `. `' | `- -><- |
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAq2oKlpK98RSteX8RAi+OAJwIRfkoGJQ7fUz9sNO+0YNL2OiM1QCfX1RO vlSto4WKfPP98xyLLSvh7kM= =MJoG -----END PGP SIGNATURE-----