[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Monotone-devel] db kill_rev_locally

From: Ludovic Brenta
Subject: Re: [Monotone-devel] db kill_rev_locally
Date: Sun, 12 Oct 2008 10:48:02 +0200
User-agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux)

Daniel Carrera writes:
> Ethan Blanton wrote:
>> Then, to connect to the server, run something like the following on
>> your workstation:
>>     ssh -L4691:localhost:4691 <server>
> Could you clarify this command? My reading of it is:
> ssh -L4691:localhost:4691 address@hidden
> Which would require me to have SSH login ("daniel"). What am I missing?

You are correct but the address@hidden account may be
unprivileged (running a restricted shell) and shared with other
developers.  You might as well call it after the project the
developers work on, e.g. address@hidden  The monotone
server itself, and the database, belong to and run as a different
user, e.g. address@hidden

I run a public monotone server on; see for explanations.  The
security model is simple: everyone has read access, and only a few
trusted developers have write access to the entire database (they can
create branches at will).  Because this is a netsync server running as
a "monotone" user that has /bin/false as its shell, only sysadmins
with root access to the machine can delete from this database.

Ludovic Brenta.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]