Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Jun 2000 18:30:08 -0700 (PDT)
From:      Kris Kennaway <kris@FreeBSD.org>
To:        James Howard <howardjp@wam.umd.edu>
Cc:        "Ilmar S. Habibulin" <ilmar@ints.ru>, freebsd-security@freebsd.org
Subject:   Re: Network ACLs 
Message-ID:  <Pine.BSF.4.21.0006201829540.53814-100000@freefall.freebsd.org>
In-Reply-To: <200006210104.VAA07282@rac6.wam.umd.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 20 Jun 2000, James Howard wrote:

> I want to be able to create a group called "inet" and anyone who is a
> member of that group may open connections.  However, they may not
> listen.  Root can do anything he/she wants.  Nobody else can do anything.

ipfw can filter based on uid and gid

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe@alum.mit.edu>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0006201829540.53814-100000>