[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Logs and Permissions for Daemons



In article <19991113213625.X3019@kitenet.net> you write:
>Brian May wrote:
>> Wont this mean if the user breaks into one daemon running as userid
>> "daemon", then he/she can break into any daemon running with that
>> userid (not to mention log files, etc)?
>
>It means if you break into one daemon, you can corrupt any other files owned
>by that user. If another daemon reads those files, you could potentially get
>control of it.
>
>But a lot of these daemons that suddently have their own users don't read
>any files owned by themselves, so there's no reason they shouldn't just run
>as daemon.

Agreed for files - although PID files might affect things...

However what about processes? eg if I break into process X running as
"daemon", what is to stop me from killing process Y that is also running
as "daemon"?
-- 
Brian May <bam@snoopy.apana.org.au>


Reply to: