From mboxrd@z Thu Jan 1 00:00:00 1970 From: andrey mirtchovski To: 9fans@cse.psu.edu Subject: Re: [9fans] Free Plan 9 "shell" accounts? In-Reply-To: <7f3c0429076f59dc5ba8e3513802d2d6@collyer.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Date: Fri, 16 May 2003 16:57:43 -0600 Topicbox-Message-UUID: af06ccc2-eacb-11e9-9e20-41e7f4b1d025 On Fri, 16 May 2003, Geoff Collyer wrote: > If giving out accounts to complete strangers, I'd want to look at what > to do about the wide-open permissions that seem to be necessary under > /mail and the ability of anybody to create and remove files from /srv. > Apparently no one can rename files in /srv (the attempt is quietly > ignored), which helps. It might be handy to have a way to create a > new #s instance or perhaps to be able to copy #s during rfork > (RFSRVG?). > you know, this may be a good small project -- identify potential soft spots of a Plan 9 installation that has completely untrusted users. i had myself created a small system to which i gave access to friends to connect with drawterm, but my setup was much different than a normal plan9 installation -- a kfs/cpu/auth server running within a host-only vmware session in a restricted unix process, with limited cpu time and disk space. i had forwarded ports 567 and 17013 to the 172.16... internal ip address of the box, and have told everybody that they simply won't be able to connect to anything external.. the accounts were just for educational purpose, and the occasional xscreensaver hack :) unfortunately my university keeps thinking that i'm running P2P applications and takes me off the net whenever it feels like it, so i can't offer this setup for general consumption... does anyone remember the alpha boxes Compaq had setup three years ago? they gave free accounts to whomever wanted them and let them test their software on spiffy fast alphas running tru64 and linux.. that's the setup i was trying to accomplish.. andrey