4 Maintainer: Ian Jackson <ijackson@chiark.greenend.org.uk>
5 Standards-Version: 2.1.1.0
6 Build-Depends: debhelper (>= 8)
10 Depends: userv, ${shlibs:Depends}, ${misc:Depends}
12 Description: VPN system (and user-mode network interface)
13 userv-ipif is a userv service to allow non-root users to create
14 network interfaces implemented in user space. No kernel patches are
15 required (the kernel's built-in SLIP driver is used).
17 Based on this, udptunnel is a a simple but flexible VPN program which
18 uses ssh for authentication and key exchange but sends the packets
19 over UDP. (Other VPN-over-ssh programs typically do PPP-over-TCP,
20 which yields poor perfoormance.) Note that udptunnel is not IPSEC.
22 The default configuration does set up any users with permission to
23 create network interfaces such as VPN endpoints.
27 Depends: userv, chiark-utils-bin, ${perl:Depends}, ${misc:Depends}
29 Description: dynamic DNS for shell account users
30 userv-dyndns is a userv service which allows non-root users to
31 modify individual DNS records in specified zones in a controlled way.
33 Typically, this can be used to provide a `dyndns.org'-like service
34 which is modifiable by shell account users.
36 The default configuration does not set up any users with permission
41 Depends: userv, ${shlibs:Depends}, ${misc:Depends}
43 Description: user-provided CGI scripts invoked by userv
44 This package contains ucgi, a userv service which allows CGI programs
45 to be provided which do not run as the webserver user, but instead
46 are owned by a particular other account.
48 Similar effects can be achieved with Apache's suexec; this package is
49 for administrators who do not trust suexec and wish to defend the
50 webserver from the CGI script providers, and vice versa, as much as
51 possible. This is achieved by using userv to do the cross-account
52 call, rather than a custom setuid helper.
54 The default configuration allows the webserver user to invoke users'
55 CGI programs from each user's ~/public-GI, but to allow external
56 callers to do this, the webserver will also need to be configured.
58 Package: userv-groupmanage
60 Depends: userv, ${perl:Depends}, ${misc:Depends}
61 Description: user-controlled group membership
62 groupmanage is a userv service which allows individual shell users to
63 create UN*X groups, and/or to change the membership of existing
64 groups of which they are recorded as the manager.
66 The default configuration allows users to create and manage a few
67 groups, but is reasonably conservative.
69 Package: userv-git-daemon
71 Depends: userv, git-core, adduser, ${perl:Depends}, ${misc:Depends}
72 Description: per-user git daemon service
73 userv-git-daemon allows users to publish git repositories which will
74 be published via the git protocol on 9418. This is a bit like
75 git-daemon except that the actual reading of each user's repositories
78 The default configuration does nothing: you must (a) manually copy
79 the line from /usr/share/doc/examples/userv-git-daemon.inetd into
80 /etc/inetd.conf and (b) specifically list hostnames and target
81 directories in /etc/userv/git-urlmap.
86 Recommends: ${perl:Depends}, ${misc:Depends}
87 Description: miscellaneous small userv scripts
88 This package a few small userv services. Since you must choose
89 whether to install this package or not as one lump, the default
90 configuration for each script does not give users any new abilities.
92 mailq - allow users to view the mail queue
93 ndc-reload - allow certain users to reload the nameserver
94 checkpasswd-* - allow users to run a UNIX password check