From: "Carlos O'Donell" <carlos-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
To: Arjun Shankar <arjun-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
Cc: "Michael Kerrisk (man-pages)"
<mtk.manpages-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>,
"linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org"
<linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
Siddhesh Poyarekar
<siddhesh-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
Subject: [patch] hosts.equiv.5: Clarify that `host <user>` enables non-like-named account logins.
Date: Wed, 17 Jun 2015 13:14:18 -0400 [thread overview]
Message-ID: <5581AAEA.9090709@redhat.com> (raw)
In-Reply-To: <20150617181755.0bea170c@zion>
On 06/17/2015 12:17 PM, Arjun Shankar wrote:
>>> Just a note: I'm hoping for a response from Arjun before I commit this.
>> Hope is not a plan :-)
>
> I see that I got here a little late. This looks good, but I have one
> nitpick:
>
>> +Allow user from host to login:
>> +.LP
>> +.RS 4
>> +.TP
>> +host user
>
> It might make sense to repeat here that such an entry will allow the
> specified user on the remote host to login as *any* user on the local host.
>
> i.e., something like:
>
> -Allow user from host to login:
> +Allow user from host to login as any non-root user:
Good point.
Signed-off-by: Carlos O'Donell <carlos-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
diff --git a/man5/hosts.equiv.5 b/man5/hosts.equiv.5
index b6ecb94..9ee0e6e 100644
--- a/man5/hosts.equiv.5
+++ b/man5/hosts.equiv.5
@@ -116,7 +116,7 @@ Allow
.I user
from
.I host
-to login:
+to login as any non-root user:
host user
@@ -152,7 +152,8 @@ Disallow all users on all hosts in a
Allow all users in a
.I netgroup
to log in from
-.IR host :
+.IR host
+as any non-root user:
host +@netgroup
---
Cheers,
Carlos.
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
next prev parent reply other threads:[~2015-06-17 17:14 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-05-24 4:58 [patch] hosts.equiv.5: Fix format, clarify IdM needs, and provide examples Carlos O'Donell
[not found] ` <55615A71.4010600-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2015-06-16 10:06 ` Michael Kerrisk (man-pages)
[not found] ` <557FF511.7040500-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
2015-06-16 21:15 ` Carlos O'Donell
[not found] ` <558091DD.30004-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2015-06-17 7:10 ` Michael Kerrisk (man-pages)
2015-06-17 16:17 ` Arjun Shankar
2015-06-17 17:14 ` Carlos O'Donell [this message]
[not found] ` <5581AAEA.9090709-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2015-06-18 13:07 ` [patch] hosts.equiv.5: Clarify that `host <user>` enables non-like-named account logins Michael Kerrisk (man-pages)
2015-06-18 6:34 ` [patch] hosts.equiv.5: Fix format, clarify IdM needs, and provide examples Michael Kerrisk (man-pages)
[not found] ` <CAKgNAkjK89FgqHPMp2znUvO2jYyiHmTreLPZc7DwG8LV-RP33w-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2015-06-18 13:15 ` Carlos O'Donell
[not found] ` <5582C459.3020402-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2015-06-18 13:51 ` Michael Kerrisk (man-pages)
[not found] ` <CAKgNAkhbX+e7vSJrxu0jfGaLESs5G2nEuX1Chaoai_K=X90Jcg-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2015-06-18 15:23 ` Carlos O'Donell
[not found] ` <5582E27D.9070600-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2015-06-18 19:20 ` Michael Kerrisk (man-pages)
2015-06-17 8:50 ` Michael Kerrisk (man-pages)
[not found] ` <558134D3.2010603-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
2015-06-18 19:22 ` Michael Kerrisk (man-pages)
[not found] ` <55831A5A.2050407-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
2015-06-24 14:13 ` Michael Kerrisk (man-pages)
2015-07-08 5:16 ` Carlos O'Donell
[not found] ` <559CB227.802-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2015-07-21 14:03 ` Michael Kerrisk (man-pages)
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5581AAEA.9090709@redhat.com \
--to=carlos-h+wxahxf7alqt0dzr+alfa@public.gmane.org \
--cc=arjun-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
--cc=linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
--cc=mtk.manpages-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org \
--cc=siddhesh-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.