blob: ff4b5a1f91c23148c694ec741922532a46f9f41d (
plain)
1
2
3
4
5
6
7
|
- DONE: HTTP AUTH from PAM through the magic of mod-auth-pam
- DONE: HTTP access from /etc/group through the magic of mod-auth-sys-group
- DONE: Shell security through rbash and privilege escalation security (for mkwiki, mkuser, etc) through sudo
- DONE: Guaranteed namespace coherence with the vhosting of cgi, secure, and normal with the aid of a wildcard SSL certificate
- TODO: Work out how to get a wildcard SSL certificate through browser-trusted PKI infrastructure.
- TODO: Work out how to get client SSL certificates to work through browser-trusted PKI infrastructure, though I don't know if we'll ever really care about this.
- TODO: Work out how to pass mailing list emails around. Probably either ssh or vserver namespace magic.
|
