Re: nosuid in fstab

["Anthony Roberts" <anthonyrcalgary_(_at_)_hotmail_(_dot_)_com>]

> So would you do that with setuid, or an entry for pfctl
> in sudoers(5), or something completely different?

Well first of all authpf solves a problem you don't necessarily
have... you could maintain your own database of usernames
and passwords that have nothing to do with users on the
OpenBSD machine. Then your web interface can pass stuff
to a daemon or cron job (or whatever) that is root. There's
a ton of ways of doing this. You still have to be careful with
the messages, as there's the potential for exploits with them,
but it's possible to design an inherently safe message format
and then check it heavily in the one place you read it.

_________________________________________________________________
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines