Changeset 320

Timestamp:

05/02/2009 20:46:33 (3 years ago)

Author:

ccowart

Message:

With the security considerations section done, the man pages are pretty
much up-to-date.

Fixes #8

File:

• trunk/confman.8.in (modified) (1 diff)

trunk/confman.8.in

@@ -367 +367 @@
 working copies to only check out the modules relevant to the current system,
 but as yet this hasn't been completed.
-.Pp
-There are some Big Ideas about
-.Nm
-that are not yet in this man page. They will be here before the ticket is
-closed and 2.0 is released.
 .Sh SECURITY CONSIDERATIONS
+.Nm 
+is intended to be run by a normal user and not by root. When needed,
+.Nm 
+makes calls to 
+.Xr sudo 8 
+to escalate privileges. This only works if the user has full root access via
+the 
+.Xr sudoers 5
+file. This model is designed to encourage individual accountability in an
+environment with several System Administrators; your own login is recorded
+in the subversion logs and recorded by sudo in the logs.
+.Pp
+While the typical use of
+.Nm
+has a shared repository for all of your machines, this may not make sense in
+all environments. Unless you are taking out-of-band measures to secure 
+various directories in your subversion repository (possibly through the use
+of access control hooks), any account making changes to the repository can
+effect changes on other machines. It would generally be a good idea to only
+share a repository with machines in a similar security tier.
 .Sh AUTHORS
 .An Chris Cowart Aq ccowart@timesinks.net