*** empty log message ***

[userv-utils.git] / debian / control

diff --git a/debian/control b/debian/control
new file mode 100644 (file)
index 0000000..3247d90
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,77 @@
+Source: userv-utils
+Section: admin
+Priority: extra
+Maintainer: Ian Jackson <ian@chiark.greenend.org.uk>
+Standards-Version: 2.1.1.0
+
+Package: userv-ipif
+Architecture: any
+Depends: userv
+Recommends: ssh
+Description: VPN system (and user-mode network interface)
+ userv-ipif is a userv service to allow non-root users to create
+ network interfaces implemented in user space.  No kernel patches are
+ required (the kernel's built-in SLIP driver is used).
+ .
+ Based on this, udptunnel is a a simple but flexible VPN program which
+ uses ssh for authentication and key exchange but sends the packets
+ over UDP.  (Other VPN-over-ssh programs typically do PPP-over-TCP,
+ which yields poor perfoormance.)  Note that udptunnel is not IPSEC.
+ .
+ The default configuration does set up any users with permission to
+ create network interfaces such as VPN endpoints.
+
+Package: userv-dyndns
+Architecture: all
+Depends: userv, chiark-utils-bin
+Recommends: bind
+Description: dynamic DNS for shell account users
+ userv-dyndns is a userv service which allows non-root users to
+ modify individual DNS records in specified zones in a controlled way.
+ .
+ Typically, this can be used to provide a `dyndns.org'-like service
+ which is modifiable by shell account users.
+ .
+ The default configuration does not set up any users with permission
+ to modify the DNS.
+
+Package: userv-cgi
+Architecture: any
+Depends: userv
+Recommends: httpd
+Description: user-provided CGI scripts invoked by userv
+ This package contains ucgi, a userv service which allows CGI programs
+ to be provided which do not run as the webserver user, but instead
+ are owned by a particular other account.
+ .
+ Similar effects can be achieved with Apache's suexec; this package is
+ for administrators who do not trust suexec and wish to defend the
+ webserver from the CGI script providers, and vice versa, as much as
+ possible.  This is achieved by using userv to do the cross-account
+ call, rather than a custom setuid helper.
+ .
+ The default configuration allows the webserver user to invoke users'
+ CGI programs from each user's ~/public-GI, but to allow external
+ callers to do this, the webserver will also need to be configured.
+
+Package: userv-groupmanage
+Architecture: all
+Depends: userv
+Description: user-controlled group membership
+ groupmanage is a userv service which allows individual shell users to
+ create UN*X groups, and/or to change the membership of existing
+ groups of which they are recorded as the manager.
+ .
+ The default configuration allows users to create and manage a few
+ groups, but is reasonably conservative.
+
+Package: userv-misc
+Architecture: all
+Depends: userv
+Description: miscellaneous small userv scripts
+ This package a few small userv services.  Since you must choose
+ whether to install this package or not as one lump, the default
+ configuration for each script does not give users any new abilities.
+ .
+ mailq - allow users to view the mail queue
+ ndc-reload  - allow certain users to reload the nameserver