X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=userv-utils.git;a=blobdiff_plain;f=debian%2Fcontrol;h=84378cf17df686bfea3f87f687b518b66d1bf937;hp=48852b41a6e8a5f00becf647d4fa7081d1e3deeb;hb=186ea161e7d144dd8e3791f174a7173e2f399346;hpb=693663c6262cbc89bc86374231b519c5d176970a diff --git a/debian/control b/debian/control index 48852b4..84378cf 100644 --- a/debian/control +++ b/debian/control @@ -2,28 +2,27 @@ Source: userv-utils Section: admin Priority: extra Maintainer: Ian Jackson -Standards-Version: 2.1.1.0 +Standards-Version: 3.7.0.0 +Build-Depends: debhelper (>= 8) -Package: userv-ipif +Package: userv-utils Architecture: any Depends: userv -Recommends: ssh -Description: VPN system (and user-mode network interface) - userv-ipif is a userv service to allow non-root users to create - network interfaces implemented in user space. No kernel patches are - required (the kernel's built-in SLIP driver is used). - . - Based on this, udptunnel is a a simple but flexible VPN program which - uses ssh for authentication and key exchange but sends the packets - over UDP. (Other VPN-over-ssh programs typically do PPP-over-TCP, - which yields poor perfoormance.) Note that udptunnel is not IPSEC. - . - The default configuration does set up any users with permission to - create network interfaces such as VPN endpoints. +Recommends: ${perl:Depends}, ${misc:Depends} +Description: privsep utilities collection + Several small userv services, which allow certain system configuration + actions to be delegated. In each case the service is disabled unless + enabled by symlink /etc/userv/services.d/* -> ../services-available/*. + . + ipif - allow non-root users to create network interfaces + ucgi - run CGI programs in providing user's account + mailq - allow users to view the mail queue + ndc-reload - allow certain users to reload the nameserver + checkpasswd-* - allow users to run a UNIX password check Package: userv-dyndns Architecture: all -Depends: userv, chiark-utils-bin +Depends: userv, chiark-utils-bin, ${perl:Depends}, ${misc:Depends} Recommends: bind Description: dynamic DNS for shell account users userv-dyndns is a userv service which allows non-root users to @@ -32,31 +31,12 @@ Description: dynamic DNS for shell account users Typically, this can be used to provide a `dyndns.org'-like service which is modifiable by shell account users. . - The default configuration does not set up any users with permission - to modify the DNS. - -Package: userv-cgi -Architecture: any -Depends: userv -Recommends: httpd -Description: user-provided CGI scripts invoked by userv - This package contains ucgi, a userv service which allows CGI programs - to be provided which do not run as the webserver user, but instead - are owned by a particular other account. - . - Similar effects can be achieved with Apache's suexec; this package is - for administrators who do not trust suexec and wish to defend the - webserver from the CGI script providers, and vice versa, as much as - possible. This is achieved by using userv to do the cross-account - call, rather than a custom setuid helper. - . - The default configuration allows the webserver user to invoke users' - CGI programs from each user's ~/public-GI, but to allow external - callers to do this, the webserver will also need to be configured. + The default configuration creates the infrastructure (including a + service user) but does not allow any users to modify the DNS. Package: userv-groupmanage Architecture: all -Depends: userv +Depends: userv, ${perl:Depends}, ${misc:Depends} Description: user-controlled group membership groupmanage is a userv service which allows individual shell users to create UN*X groups, and/or to change the membership of existing @@ -67,7 +47,7 @@ Description: user-controlled group membership Package: userv-git-daemon Architecture: all -Depends: userv, git-core +Depends: userv, git-core, adduser, ${perl:Depends}, ${misc:Depends} Description: per-user git daemon service userv-git-daemon allows users to publish git repositories which will be published via the git protocol on 9418. This is a bit like @@ -78,14 +58,3 @@ Description: per-user git daemon service the line from /usr/share/doc/examples/userv-git-daemon.inetd into /etc/inetd.conf and (b) specifically list hostnames and target directories in /etc/userv/git-urlmap. - -Package: userv-misc -Architecture: all -Depends: userv -Description: miscellaneous small userv scripts - This package a few small userv services. Since you must choose - whether to install this package or not as one lump, the default - configuration for each script does not give users any new abilities. - . - mailq - allow users to view the mail queue - ndc-reload - allow certain users to reload the nameserver