diff options
| author | Bryan Bishop <kanzure@gmail.com> | 2010-10-29 19:46:24 -0500 |
|---|---|---|
| committer | Bryan Bishop <kanzure@gmail.com> | 2010-10-29 19:46:24 -0500 |
| commit | 7786ce2a332b0eba4b3ca7c57f906a32e8715da3 (patch) | |
| tree | 5a9fe32b69a93f41ae2ac82a50788fe50c0d86fb /docs/architecture/needed_admin_infrastructure.mdwn | |
| parent | 413373be9ab30eb21b564cdc180cb2dcda77bfeb (diff) | |
| download | piny-code-7786ce2a332b0eba4b3ca7c57f906a32e8715da3.tar.gz piny-code-7786ce2a332b0eba4b3ca7c57f906a32e8715da3.zip | |
Starting repo cleanup to make this not so awful
Diffstat (limited to 'docs/architecture/needed_admin_infrastructure.mdwn')
| -rw-r--r-- | docs/architecture/needed_admin_infrastructure.mdwn | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/architecture/needed_admin_infrastructure.mdwn b/docs/architecture/needed_admin_infrastructure.mdwn new file mode 100644 index 0000000..59365c2 --- /dev/null +++ b/docs/architecture/needed_admin_infrastructure.mdwn @@ -0,0 +1,7 @@ +- DONE: HTTP AUTH from PAM through the magic of mod-auth-pam +- DONE: HTTP access from /etc/group through the magic of mod-auth-sys-group +- DONE: Shell security through rbash and privilege escalation security (for mkwiki, mkuser, etc) through sudo +- DONE: Guaranteed namespace coherence with the vhosting of cgi, secure, and normal with the aid of a wildcard SSL certificate +- TODO: Work out how to pass mailing list emails around. Probably either ssh or vserver namespace magic. +- DONE: manual [[setup file overrides]], /etc/ikiwiki/piny/$reponame.setup.pl, included directly with 'do' before dumping state. +- DONE: rebuildrepo |