Subject: Re: Setup on unprivileged accounts

From: John Goerzen <[email-masked]>
Date: Wed, 04 Aug 2021 07:22:19 -0500

On Tue, Aug 03 2021, John Goerzen wrote:

> 2) Perhaps I could lock down the setuid nncp-daemon and have a 
> wrapper that
> forces command-line options to a certain set.  It sure has some 
> elegance to it,
> as it avoids cron entirely (at least for exchange; may still 
> need it for
> tossing), but still makes me nervous.

A variant on that one that occurred to me: ssh authorized_keys 
with a lot of lockdowns.  I could then force the command to be run 
with only designated command-line parameters, at least.  It still 
makes me nervous (ssh!), but less do.  People could ssh to 
localhost and exchange data that way.

John