[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: daemons running as nobody



On Sunday 01 April 2001 23:13, Arthur Korn wrote:
> Note: running all daemons as root is even worse than running all
> as nobody, but many daemons have to bind to privilegued ports
> somehow, and since there are no filesystem-like permissions on
> ports daemons have to be launched as root.

Install the "authbind" package and you get file system like permissions on 
ports!

> ( msyslog wouldn't be running as root if there weren't network
> input modules that need to reopen privilegued ports on
> reinitialisation. )

So run it from authbind.

> > What does nobody intended for?
>
> uhm ... dunno.

Nobody is a catch-all user.  There are quite a number of programs which will 
setuid(nobody) if run as root.

-- 
http://www.coker.com.au/bonnie++/     Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/       Postal SMTP/POP benchmark
http://www.coker.com.au/projects.html Projects I am working on
http://www.coker.com.au/~russell/     My home page



Reply to: