On Fri, Jan 19, 2018 at 02:41:42PM +0100, Ludovic Courtès wrote:
> Authorizing keys is necessarily limited to root since the store is
> shared among all users of the machine.  I don’t see any way around that

Well, the daemon could update itself with its own privileges. How
about maintaining authentication for a channel at runtime in RAM. When
the daemon restarts it is lost. The channel will not be shared with
other users. So every user maintains their own channels. When a
channel reconnects it authenticates itself again.

There really is no reason to share individual channels between users
(other then their outputs).

Pj.

Reply via email to