Well, why files? Just, say, a permission to talk to outer world
via some protocol that will otherwise be granted to *all* users
of given host. Is it bad idea?

On Fri, Feb 02, 2007 at 09:39:11AM -0500, Marcus J. Ranum wrote:
> One of the other things a lot of us were afraid of (fortunately) never
> came to pass -- and that was the (inevitable) use of ident as a
> permissions gate. You know, the old "if ident says that the user
> is 'mjr' then grant access to 'mjr's files!" brain damage. Given
> the level of stupid out there, a lot of us expected that to happen.

firewall-wizards mailing list