On Monday 28 April 2008, Albert Hopkins wrote:
> On Mon, 2008-04-28 at 12:03 -0500, Chris Frederick wrote:
> > Hi all,
> >
> > I'm trying to set up the portage directory to be hosted over nfs.
> > Everything is working great but I would like to increase the
> > security a
> > little. I was wondering if there's an easy way to restrict
> > 'emerge --sync' to only work on the server, while still letting
> > all the nfs client machines download sources and emerge packages.
>
> Have clients only mount portage read-only and put distfiles in
> another fs and make it read-write.

Yes, this should work. I have got just one question: How does
disabling "emerge --sync" from NFS clients improve security?

Uwe

--
Informal Linux Group Namibia:
http://www.linux.org.na/
SysEx (Pty) Ltd.:
http://www.SysEx.com.na/
--
gentoo-user@(protected)