Re: [9fans] If hostid==uid, then /lib/ndb/auth is not checked.

[YAMANASHI Takeshi <uncover@beat.cc.titech.ac.jp>]

> Keeping people out of a machine is another problem altogether.
: 
> Perhaps we could do something similar on a per service basis,
> i.e., a servicesdb that each service (or listen itself) can
> consult to determine yay or nay for the service.  For example,
> you could make /lib/ndb/common:
> 
> tcp=cpu port=17013 uid=!presotto uid=*

I thought of similar control, but based on the idea of tcpwrappers, like:

/lib/ndb/local:
ipnet=xxx.xx.xx.xx ipmask=xxx.xxx.xxx.xxx
	permit=tcp10
	permit=tcp20
	deny=all

using ndb/ipquery to determine if a connection is allowed or not.
ndb is so powerful, isn't it?


P.S
	Thank you for all who helped me to understand the speaksfor
	relationship.
--