Help-Site Computer Manuals
Software
Hardware
Programming
Networking
  Algorithms & Data Structures   Programming Languages   Revision Control
  Protocols
  Cameras   Computers   Displays   Keyboards & Mice   Motherboards   Networking   Printers & Scanners   Storage
  Windows   Linux & Unix   Mac

email-server
make changes within an infostructure by remote control

email-server - make changes within an infostructure by remote control


NAME

email-server - make changes within an infostructure by remote control


SYNOPSIS

email-server < {email-message}


DESCRIPTION

This program is designed to make changes to an infostructure by remote control.

The program is absolutely security critical. If someone else can get it to accept messages as if they are from you then they will be able to change your infostructure as much as they like. You will at least get told that they are doing things so that you can stop them, unless they stop that somehow.

What security do we provide? Well, the only safe security system to use is PGP. Everybody should be using this anyway. When you are setting the program up, just give it all of the public keys of all the people you want authorised.

The other security system provided is passwords. A normal email will travel through as many as 20 or so different computers (even if it's sent directly over SMTP:- if mail servers and forwarding are involved, this can be much worse). Provided that you can trust every single one of those people and provided that they are all so security expert that none of their machines can be broken into, you'll be fine. Put another way, this is not security.. but that might be okay by you.

There are two final security controls. Firstly we record all of the actions which are carried out on the system and send a log to the appropriate users, secondly we can keep backups of files which are changed which can then be reverted to if there is a problem.


MESSAGE FORMAT

Messages can be endcoded in various ways.

  • PGP encoding

  • gzip compression

  • uuencoding

  • mime encoding

First this is stripped away. Next a security check is carried out. Either that the first non-blank line matches the users password or that the message matches a users PGP signature.

commands

The possible commands are

fixlink url new-url addfile filename length ....new file.... patchfile filename length ....file patch.... changefile filename length ....substituted file.... deletefile filename length ....substituted file.... addirectory filename deletedirectory filename

All filenames must be specified relative to the infostructures base and there may be no use of the down directory string (/../). If there is then the command will be rejected.

Programminig
Wy
Wy
yW
Wy
Programming
Wy
Wy
Wy
Wy