From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2 autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 1766 invoked from network); 14 Feb 2023 00:46:00 -0000 Received: from tb-ob0.topicbox.com (64.147.108.117) by inbox.vuxu.org with ESMTPUTF8; 14 Feb 2023 00:46:00 -0000 Received: from tb-mx0.topicbox.com (tb-mx0.nyi.icgroup.com [10.90.30.73]) by tb-ob0.topicbox.com (Postfix) with ESMTP id C8F60221D4 for ; Mon, 13 Feb 2023 19:45:57 -0500 (EST) (envelope-from bounce.mMd4c6b5c3652a1888a1f863c4.r522be890-2105-11eb-b15e-8d699134e1fa@9fans.bounce.topicbox.com) Received: by tb-mx0.topicbox.com (Postfix, from userid 1132) id C5CEFE68F9F; Mon, 13 Feb 2023 19:45:57 -0500 (EST) ARC-Authentication-Results: i=2; topicbox.com; arc=pass; dkim=none (no signatures found); dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=orthanc.ca; spf=pass smtp.mailfrom=lyndon@orthanc.ca smtp.helo=orthanc.ca; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (message has been altered)) (Message modified while forwarding at Topicbox) ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=from:to:subject:in-reply-to:references :mime-version:content-type:content-id:date:message-id:list-help :list-id:list-post:list-subscribe:reply-to :content-transfer-encoding:list-unsubscribe; s=sysmsg-1; t= 1676335557; bh=zG0buxuhd4r/eZjVU1IKyby0Hj38EwyJ1eDOZO+g5qE=; b=r cA1wqvMXWG4KGoERSS7lsMZtou1PS97QMZYiP8GUksjjfdn4I0qEyA1r1jYZYERi DdyoBoEOlS6Qaranas0u7lpo5zX/DV2hCZ4EEaghJem5zFkZ1mvNBNZPtdrwMbn0 TKAuXqWZU6fKaEfDmXf/U6CDPOXFo6b10JJJ/ozj4A= ARC-Seal: i=2; a=rsa-sha256; cv=pass; d=topicbox.com; s=sysmsg-1; t= 1676335557; b=mvMHbkvrisy3KyLFt3wzkqCxORs/iZjSGkQjqOa0hVUGDbXLoP xUVIsNjldna62KHpVMCtmRs7gozIQaSZ9/L0Ih9NmjknBvWI+OSk6Ai9CS8dDLEc YUD7Q0kv05w3tS+Bai89erYzLRR3oa+2AHp5T8qjgLoxVvPVNMHIVq9gQ= Authentication-Results: topicbox.com; arc=pass; dkim=none (no signatures found); dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=orthanc.ca; spf=pass smtp.mailfrom=lyndon@orthanc.ca smtp.helo=orthanc.ca; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (message has been altered)) (Message modified while forwarding at Topicbox) X-Received-Authentication-Results: tb-mx0.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC did not pass); dkim=none (no signatures found); dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=orthanc.ca; iprev=pass smtp.remote-ip=208.79.93.154 (orthanc.ca); spf=pass smtp.mailfrom=lyndon@orthanc.ca smtp.helo=orthanc.ca; x-aligned-from=pass (Address match); x-me-sender=none; x-ptr=pass smtp.helo=orthanc.ca policy.ptr=orthanc.ca; x-return-mx=pass header.domain=orthanc.ca policy.is_org=yes (MX Records found: orthanc.ca); x-return-mx=pass smtp.domain=orthanc.ca policy.is_org=yes (MX Records found: orthanc.ca); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=9fans.net; h=from:to :subject:in-reply-to:references:mime-version:content-type :content-id:date:message-id:list-help:list-id:list-post :list-subscribe:reply-to:content-transfer-encoding :list-unsubscribe; s=dkim-1; t=1676335557; x=1676421957; bh=0i7Y HcEoA06X5IN6C+D1OCk5wUjFEXsh36MKtVQj2jQ=; b=O3NWxF22a1tzi6lVq7tF tCp/oABRTVLatl1uvTzERExMrw5p+kXXzNN/ucJFjabrl8k128Q7A/wQQjBKFiFS RfY2IPdVeQL/yD2cgi6uBYQKRYyFiDeXutviFbbATTBO9memh7onKCwtMo/zaRng JuLouQTD76af0YdxU+lWqAM= Received: from tb-mx0.topicbox.com (localhost.local [127.0.0.1]) by tb-mx0.topicbox.com (Postfix) with ESMTP id 0524FE68B55 for <9fans@9fans.net>; Mon, 13 Feb 2023 19:45:41 -0500 (EST) (envelope-from lyndon@orthanc.ca) Received: from tb-mx0.topicbox.com (localhost [127.0.0.1]) by tb-mx0.topicbox.com (Authentication Milter) with ESMTP id DB354314002; Mon, 13 Feb 2023 19:45:40 -0500 ARC-Seal: i=1; a=rsa-sha256; cv=none; d=topicbox.com; s=arcseal; t= 1676335540; b=SXiL0Q1WJ1F3ITA+HqsBKIFA4JRixWvDIo6xis3rzp4Jr2+/X8 +pWjKdybyHPo7fXGur38qq3W7cNVJSHC5WtkNfu1ISRNiKqamrH2jOBxZGxhd0Kv JqMHm8lL2te39yOPVVGs3e8M0BzhsjbU7tchXBoXnyHu1yMj0ncl3zex4CC4Vgcc J7B/lVSOmcEngVRhFp3aULhtVdgIBkA0HmH/Pyo424a5/o+qOfONtP8Q2e/iUYXW 553izt9v2Qhb/Udt9vSfrGbx1U9oNExhQdKYFZGZBN+cZa2BziFqEB5m4fn8Sh2v 49ZiRvSJbQmOHGrzhaDgRvtctczKlI5qQrzg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=from:to:subject:in-reply-to:references :mime-version:content-type:content-id:date:message-id; s= arcseal; t=1676335540; bh=pzS2M2BjuP3aMOJswAFMdL5eF6uvuknKUuXSPk WqzkQ=; b=myc4sSQnidmIZV9WqOGru832UhBM/rpLhT3dw93l3ArhYISQDq+WYv 799Ls/CG5+1NDFenCd/wQ6QCvOPH3qs80HvJES3eV4eW6DbLBOvsb2ELYWfiXt9t gWx7feovGOWXcx6qtosTspAFlgRn6S/5ecYM1A2YcrkWo1BcXImeZhosD6iOrHAm kF+Z7q+2JDkkun5VLXPxcgGdiesN5gvOUvBR908o0B1mZ/8mcS58MM4WkaXq3OzV OsTbmVhaxP3f1QQpT30E8fk+7QNrv26kPegQJ2UwU0DdozhrLSoi0NDRvgWrTmWI zvDulisptdmnQKglLEdQzdC2g6Jo9PsQ== ARC-Authentication-Results: i=1; tb-mx0.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC did not pass); dkim=none (no signatures found); dmarc=none policy.published-domain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,d=none,d.eval=none) policy.policy-from=p header.from=orthanc.ca; iprev=pass smtp.remote-ip=208.79.93.154 (orthanc.ca); spf=pass smtp.mailfrom=lyndon@orthanc.ca smtp.helo=orthanc.ca; x-aligned-from=pass (Address match); x-me-sender=none; x-ptr=pass smtp.helo=orthanc.ca policy.ptr=orthanc.ca; x-return-mx=pass header.domain=orthanc.ca policy.is_org=yes (MX Records found: orthanc.ca); x-return-mx=pass smtp.domain=orthanc.ca policy.is_org=yes (MX Records found: orthanc.ca); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgedvhedrudeivddgvdehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggvpdfu rfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvffujg hfgggtfffksehttdertddttddvnecuhfhrohhmpedfnfihnhguohhnucfpvghrvghnsggv rhhgucdlggfgjefvhfgisdgggfeiueeuofdmfdcuoehlhihnughonhesohhrthhhrghntg drtggrqeenucggtffrrghtthgvrhhnpeehffetuedutedtiedvheelvefhtefghfeiueeu gefgieevhfduudeffffhueehveenucfkphepvddtkedrjeelrdelfedrudehgeenucevlh hushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpedvtdekrdejledrleefrddu heegpdhhvghlohepohhrthhhrghntgdrtggrpdhmrghilhhfrhhomhepoehlhihnughonh esohhrthhhrghntgdrtggrqe X-ME-VSScore: 0 X-ME-VSCategory: clean Received-SPF: pass (orthanc.ca: 208.79.93.154 is authorized to use 'lyndon@orthanc.ca' in 'mfrom' identity (mechanism 'ip4:208.79.93.154' matched)) receiver=tb-mx0.topicbox.com; identity=mailfrom; envelope-from="lyndon@orthanc.ca"; helo=orthanc.ca; client-ip=208.79.93.154 Received: from orthanc.ca (orthanc.ca [208.79.93.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by tb-mx0.topicbox.com (Postfix) with ESMTPS for <9fans@9fans.net>; Mon, 13 Feb 2023 19:45:39 -0500 (EST) (envelope-from lyndon@orthanc.ca) Received: from orthanc.ca (localhost [127.0.0.1]) by orthanc.ca (OpenSMTPD) with ESMTP id 002416a4; Mon, 13 Feb 2023 16:45:37 -0800 (PST) From: "Lyndon Nerenberg (VE7TFX/VE6BBM)" To: 9fans <9fans@9fans.net>, hiro <23hiro@gmail.com> Subject: Re: [9fans] different users for different system roles In-reply-to: References: Comments: In-reply-to hiro <23hiro@gmail.com> message dated "Fri, 10 Feb 2023 12:19:45 +0100." MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-ID: <21999.1676335537.1@orthanc.ca> Date: Mon, 13 Feb 2023 16:45:37 -0800 Message-ID: <1a1a0b09f464d41a@orthanc.ca> Topicbox-Policy-Reasoning: allow: sender is a member Topicbox-Message-UUID: eab97a18-ac00-11ed-80fa-ee16aa0e9e94 Archived-At: =?UTF-8?B?PGh0dHBzOi8vOWZhbnMudG9waWNib3guY29tL2dyb3Vwcy85?= =?UTF-8?B?ZmFucy9UNjkwZTQzMDQ4NDdhMzRlNC1NZDRjNmI1YzM2NTJhMTg4OGExZjg2?= =?UTF-8?B?M2M0Pg==?= List-Help: List-Id: "9fans" <9fans.9fans.net> List-Post: List-Software: Topicbox v0 List-Subscribe: Precedence: list Reply-To: 9fans <9fans@9fans.net> Content-Transfer-Encoding: quoted-printable List-Unsubscribe: , Topicbox-Delivery-ID: 2:9fans:437d30aa-c441-11e9-8a57-d036212d11b0:522be890-2105-11eb-b15e-8d699134e1fa:Md4c6b5c3652a1888a1f863c4:1:4SuyqT3F0hSuD60Lh8o0FRl8xRktWmN8nnfLBcchAXY hiro writes: > > should each system role get his own user? > > Like one user for file servers, one for auth, one for venti, and one fo= r =3D > cpu > > servers. My was has always been to have a file system user and an auth server user that are used ONLY for those roles. As for CPU servers, it really depends on how you use them. The main reason you might want to have different CPU server owners is to control access to physical hardware. E.g. I have machines that are used to control my radios via their serial and USB interfaces. For those, I don't want the "general pupulation" to have access to that hardware, so I run those servers under a userid that is distinct from the "general purpose" CPU server owner. Oh, the Pi I use for bluetooth dev work has its own host owner, for similar reasons. I'm sure there are other cases, but that's the only one where I've personally had a need for multiple host owners. --lyndon ------------------------------------------ 9fans: 9fans Permalink: https://9fans.topicbox.com/groups/9fans/T690e4304847a34e4-Md4c6b= 5c3652a1888a1f863c4 Delivery options: https://9fans.topicbox.com/groups/9fans/subscription