userv

  Put the security boundary where it ought to be.

  userv (pronounced you-serve) is a program which, according to the
  specification, is

    a Unix system facility to allow one program to invoke another when
    only limited trust exists between them.

  It is a tool for system administrators, who often find themselves with
  a program running as one user which needs to be able to do certain
  things as another user. For example, my machine's news system needs to
  scan my users' newsrcs to ensure that the right newsgroups are
  fetched. Before userv that part of the news system had to run as root,
  and clumsily use `su'.

  It is also a component for application authors. For example, imagine a
  version of `cron' which didn't need to run as root, so that a security
  bug in cron would just mean that bad people could get cron jobs to run
  at the wrong times, rather than everyone on the system being able to
  break in completely. Imagine being able to do sophisticated mail
  filtering at delivery time without the mail transfer or delivery
  agents needing to be root.

Feedback

  If you are subscribed to userv-discuss please send bug reports there;
  otherwise mail them to [email protected].

Mailinglists

  I have set up mailinglists userv-announce and userv-discuss. The
  announcements list is moderated and will contain only announcements of
  important bugs, new versions, &c. The bug reports address mentioned
  above is also a mailing list; feel free to subscribe to it.

  There are [1]archives and subscription web pages, or you can subscribe
  by sending mail containing the word `subscribe' to
  [email protected] or
  [email protected].

Download

  Available for download from [2]chiark.greenend.org.uk are:
    * The [3]current version as a gzipped tarfile.
    * Debian GNU/Linux source and binary packages are available via
      [4]anonymous FTP.
    * All versions distributed so far are also available via
      [5]anonymous FTP.
    * The [6]HTML specification, including [7]notes on how and why to
      use it. The specification is also available as a [8]gzipped
      PostScript file. (The Debiandoc-SGML source for the spec is in the
      software distribution.)
    * The [9]overview diagram as PostScript, or in the original [10]xfig
      format.
    * The [11]changelog as a plain text file.
    * The [12]slides for a talk I gave at the 1998 UKUUG Linux Event in
      Manchester and earlier at the 1998 Linux Kongress in Cologne.
    * A mirror of my CVS repository is available via rsync from
      rsync.chiark.greenend.org.uk::ftp/users/ian/cvs-pub/userv (use FTP
      first to find your way around), or via [13]cvsweb.

  userv is also available from the [14]GNU Project FTP servers and their
  [15]mirrors.

Copyright and licensing

  userv is Copyright 1996-1999 Ian Jackson.

  userv is free software; you can redistribute it and/or modify it under
  the terms of the GNU General Public License as published by the Free
  Software Foundation; either version 2 of the License, or (at your
  option) any later version.

  This program and documentation is distributed in the hope that it will
  be useful, but without any warranty; without even the implied warranty
  of merchantability or fitness for a particular purpose. See the
  [16]GNU General Public License for more details.

  You should have received a copy of the GNU General Public License
  along with userv, or one should be available above; if not, write to
  the [17]Free Software Foundation, 59 Temple Place - Suite 330, Boston,
  MA 02111-1307, USA, or email [email protected].
    _________________________________________________________________

  [18]Ian Jackson / [19][email protected]; more
  [20]free software by me.

  [21]GNU home page; [22]chiark home page; [23]site or mirror home page

  This web page is Copyright (C)1996-1999 Ian Jackson. See the
  [24]Copyright/acknowledgements.

  Use any browser - [25]Campaign for a non-browser-specific WWW

References

  1. http://www.chiark.greenend.org.uk/mailman/listinfo
  2. http://www.chiark.greenend.org.uk/~ian/userv/
  3. http://www.chiark.greenend.org.uk/~ian/userv/userv.tar.gz
  4. ftp://ftp.chiark.greenend.org.uk/users/ian/userv/debian/
  5. ftp://ftp.chiark.greenend.org.uk/users/ian/userv/
  6. http://www.chiark.greenend.org.uk/~ian/userv/spec.html/
  7. http://www.chiark.greenend.org.uk/~ian/userv/spec.html/ch-notes.html
  8. http://www.chiark.greenend.org.uk/~ian/userv/spec.ps.gz
  9. http://www.chiark.greenend.org.uk/~ian/userv/overview.ps
 10. http://www.chiark.greenend.org.uk/~ian/userv/overview.fig
 11. http://www.chiark.greenend.org.uk/~ian/userv/changelog.txt
 12. http://www.chiark.greenend.org.uk/~ian/userv/talk-1998-jun-manchester.ps
 13. http://www.chiark.greenend.org.uk/ucgi/~ijackson/cvsweb/userv/
 14. http://www.gnu.org/
 15. http://www.gnu.org/order/ftp.html
 16. http://www.chiark.greenend.org.uk/~ian/COPYING.txt
 17. http://www.fsf.org/
 18. http://www.chiark.greenend.org.uk/
 19. mailto:[email protected]
 20. http://www.chiark.greenend.org.uk/~ian/software/
 21. http://www.gnu.org/
 22. http://www.chiark.greenend.org.uk/
 23. http://www.chiark.greenend.org.uk/
 24. http://www.chiark.greenend.org.uk/~ian/sw-www-copy.html
 25. http://www.anybrowser.org/campaign/