summaryrefslogtreecommitdiff
path: root/architecture/needed_admin_infrastructure.mdwn
blob: 8d49ab45543d5719ca4e741ceeb7165719bc6ac9 (plain)
1
2
3
4
5
6
- DONE: HTTP AUTH from PAM through the magic of mod-auth-pam
- DONE: HTTP access from /etc/group through the magic of mod-auth-sys-group
- DONE: Shell security through rbash and privilege escalation security (for mkwiki, mkuser, etc) through sudo
- DONE: Guaranteed namespace coherence with the vhosting of cgi, secure, and normal with the aid of a wildcard SSL certificate
- TODO: Work out how to pass mailing list emails around. Probably either ssh or vserver namespace magic.
- TODO: manual [[setup file overrides]], probably /etc/ikiwiki/piny/*.setup.overrides taking the form of something like <http://piny.be/jrayhawk/notes/ikiwiki_setup_mangling/>