Source: userv-utils Section: admin Priority: extra Maintainer: Ian Jackson Standards-Version: 2.1.1.0 Package: userv-ipif Architecture: any Depends: userv Recommends: ssh Description: VPN system (and user-mode network interface) userv-ipif is a userv service to allow non-root users to create network interfaces implemented in user space. No kernel patches are required (the kernel's built-in SLIP driver is used). . Based on this, udptunnel is a a simple but flexible VPN program which uses ssh for authentication and key exchange but sends the packets over UDP. (Other VPN-over-ssh programs typically do PPP-over-TCP, which yields poor perfoormance.) Note that udptunnel is not IPSEC. . The default configuration does set up any users with permission to create network interfaces such as VPN endpoints. Package: userv-dyndns Architecture: all Depends: userv, chiark-utils-bin Recommends: bind Description: dynamic DNS for shell account users userv-dyndns is a userv service which allows non-root users to modify individual DNS records in specified zones in a controlled way. . Typically, this can be used to provide a `dyndns.org'-like service which is modifiable by shell account users. . The default configuration does not set up any users with permission to modify the DNS. Package: userv-cgi Architecture: any Depends: userv Recommends: httpd Description: user-provided CGI scripts invoked by userv This package contains ucgi, a userv service which allows CGI programs to be provided which do not run as the webserver user, but instead are owned by a particular other account. . Similar effects can be achieved with Apache's suexec; this package is for administrators who do not trust suexec and wish to defend the webserver from the CGI script providers, and vice versa, as much as possible. This is achieved by using userv to do the cross-account call, rather than a custom setuid helper. . The default configuration allows the webserver user to invoke users' CGI programs from each user's ~/public-GI, but to allow external callers to do this, the webserver will also need to be configured. Package: userv-groupmanage Architecture: all Depends: userv Description: user-controlled group membership groupmanage is a userv service which allows individual shell users to create UN*X groups, and/or to change the membership of existing groups of which they are recorded as the manager. . The default configuration allows users to create and manage a few groups, but is reasonably conservative. Package: userv-git-daemon Architecture: all Depends: userv, git-core Description: per-user git daemon service userv-git-daemon allows users to publish git repositories which will be published via the git protocol on 9418. This is a bit like git-daemon except that the actual reading of each user's repositories is done as that user. . The default configuration does nothing: you must (a) manually copy the line from /usr/share/doc/examples/userv-git-daemon.inetd into /etc/inetd.conf and (b) specifically list hostnames and target directories in /etc/userv/git-urlmap. Package: userv-misc Architecture: all Depends: userv Description: miscellaneous small userv scripts This package a few small userv services. Since you must choose whether to install this package or not as one lump, the default configuration for each script does not give users any new abilities. . mailq - allow users to view the mail queue ndc-reload - allow certain users to reload the nameserver checkpasswd-* - allow users to run a UNIX password check