[vdr] Re: Programm VDR over Web

[Guido Fiala <gfiala@s.netic.de>]

>The autentisation is always a problem of the service
>which opens the port.

So thought i (although a firewall is a good idea anyway).

>If VDR opens a port to the internet: It's his problem
>to authenticate, not the systems.
>
> I don't know how the "system" should authenticate if
> no "logind" etc. is involved at all.

vdr would need permanent suid-root (at least for the authentication
child process), which could then use the systems login procedures.

> Bind the VDR port explicit to "localhost" (127.0.0.1) or

AFAIK, IP-sources can easily be faked - that's not secure :-(