Hi Dave,
----- Original Message -----
> Hi,
>
> During a recent irc discussion, Frank suggested the addition of an
> option to limit pmlogger to listening only the AF_UNIX socket for
> control connections. The idea is that the new simple authentication on
> that socket is of no use if a user can just go ahead and connect via
> inet or ipv6. It was also noted during the discussion that the same
> effect could be achieved using ACL, something like
>
> [access]
> disallow .* : all;
> disallow :* : all;
> allow unix:* : enquire;
>
> so the option would really just be a shortcut with the additional effect
Having both an option and the config for specifying access, seems like
it might introduce awkwardness wrt having to deal with ambiguities and
conflicting specifications? If that's true then I'd vote for just the
config file specification I guess - one source of truth.
cheers.
--
Nathan
|