Re: 'becomes' script (was Re: last call ... newgrp...)

On 10/6/2002 16:54, Will Partain wrote:

> Is this line worth pursuing?  (run 'ssh remote becomes
> --user=... --group=...' and blast the desired script at it?)

Hmmm. It means one more bootstrap executable to manage, but that doesn't
seem too onerous. On the other hand it means more creeping interactions
between the core and miscellaneous tools (I already feel uncomfortable at
how tied ARK is to sudo/ersh/ssh/lndir/md5sum/etc).

I'd say it's OK for now (since newgrp is Not Very Good), but we need to
revisit these relationships at the Arusha Refactoring Grand Hootenanny ;-)
I'm worried that ARK is creeping towards being a tool for implementing the
Sidai policy.

Jonathan


[On the gripping hand, perhaps you could just use Python as the remote
interpreter and throw a short script at it that changes gid/uid and then
invokes sh with a literal string as input. becomes is so simple that there's
no particular need for it to be separate.]

-- 
jonathan hogg, one good idea ltd, 131 queen margaret dr., glasgow g20 8pd
http://www.onegoodidea.com/ tel:+44-(0)7976-614338 fax:+44-(0)7970-537451


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink