d25819de962c46963efb0211692e659c5f0fab75
[userv-utils] / debian / control
1 Source: userv-utils
2 Section: admin
3 Priority: extra
4 Maintainer: Ian Jackson <ijackson@chiark.greenend.org.uk>
5 Standards-Version: 3.7.0.0
6 Build-Depends: debhelper (>= 8)
7
8 Package: userv-utils
9 Architecture: all
10 Depends: userv
11 Recommends: ${perl:Depends}, ${misc:Depends}
12 Description: privsep utilities collection
13 Several small userv services, which allow certain system configuration
14 actions to be delegated. In each case the service is disabled unless
15 enabled by symlink /etc/userv/services.d/* -> ../services-available/*.
16 .
17 mailq - allow users to view the mail queue
18 ndc-reload - allow certain users to reload the nameserver
19 checkpasswd-* - allow users to run a UNIX password check
20
21 Package: userv-ipif
22 Architecture: any
23 Depends: userv, ${shlibs:Depends}, ${misc:Depends}
24 Recommends: ssh
25 Description: VPN system (and user-mode network interface)
26 userv-ipif is a userv service to allow non-root users to create
27 network interfaces implemented in user space.
28 .
29 The default configuration does set up any users with permission to
30 create network interfaces such as VPN endpoints.
31
32 Package: userv-dyndns
33 Architecture: all
34 Depends: userv, chiark-utils-bin, ${perl:Depends}, ${misc:Depends}
35 Recommends: bind
36 Description: dynamic DNS for shell account users
37 userv-dyndns is a userv service which allows non-root users to
38 modify individual DNS records in specified zones in a controlled way.
39 .
40 Typically, this can be used to provide a `dyndns.org'-like service
41 which is modifiable by shell account users.
42 .
43 The default configuration does not set up any users with permission
44 to modify the DNS.
45
46 Package: userv-cgi
47 Architecture: any
48 Depends: userv, ${shlibs:Depends}, ${misc:Depends}
49 Recommends: httpd
50 Description: user-provided CGI scripts invoked by userv
51 This package contains ucgi, a userv service which allows CGI programs
52 to be provided which do not run as the webserver user, but instead
53 are owned by a particular other account.
54 .
55 Similar effects can be achieved with Apache's suexec; this package is
56 for administrators who do not trust suexec and wish to defend the
57 webserver from the CGI script providers, and vice versa, as much as
58 possible. This is achieved by using userv to do the cross-account
59 call, rather than a custom setuid helper.
60 .
61 The default configuration allows the webserver user to invoke users'
62 CGI programs from each user's ~/public-cgi, but to allow external
63 callers to do this, the webserver will also need to be configured.
64
65 Package: userv-groupmanage
66 Architecture: all
67 Depends: userv, ${perl:Depends}, ${misc:Depends}
68 Description: user-controlled group membership
69 groupmanage is a userv service which allows individual shell users to
70 create UN*X groups, and/or to change the membership of existing
71 groups of which they are recorded as the manager.
72 .
73 The default configuration allows users to create and manage a few
74 groups, but is reasonably conservative.
75
76 Package: userv-git-daemon
77 Architecture: all
78 Depends: userv, git-core, adduser, ${perl:Depends}, ${misc:Depends}
79 Description: per-user git daemon service
80 userv-git-daemon allows users to publish git repositories which will
81 be published via the git protocol on 9418. This is a bit like
82 git-daemon except that the actual reading of each user's repositories
83 is done as that user.
84 .
85 The default configuration does nothing: you must (a) manually copy
86 the line from /usr/share/doc/examples/userv-git-daemon.inetd into
87 /etc/inetd.conf and (b) specifically list hostnames and target
88 directories in /etc/userv/git-urlmap.