#7606 NORM xs-0.4: Confine DS-backup ssh+rsync

[Zarro Boogs per Child]

#7606: Confine DS-backup ssh+rsync
------------------------------+---------------------------------------------
   Reporter:  martinlanghoff  |       Owner:  douglas      
       Type:  enhancement     |      Status:  assigned     
   Priority:  normal          |   Milestone:  xs-0.4       
  Component:  school server   |     Version:  not specified
 Resolution:                  |    Keywords:  ds-backup    
Next_action:  never set       |    Verified:  0            
  Blockedby:                  |    Blocking:               
------------------------------+---------------------------------------------

Comment(by cjb):

 Hm, I don't understand.  Why do we need to do this?  Doesn't the benefit
 kids would get from access to a machine that they're likely to understand
 more about than their administrators outweigh security reasons (which
 haven't been explained here) for not allowing them access?

 I'm fine with compartmentalizing users to their own uid, but this work
 seems to go farther than that into limiting them to no shell access
 whatsoever.  That sounds like a mistake to me.

-- 
Ticket URL: <http://dev.laptop.org/ticket/7606#comment:5>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system