Re: unowned processes and who controls them (was: Re: passwd entry for uid -1
On Thu, Jun 07, 2001 at 10:10:34AM -0500, Neal H Walfield wrote:
> > That would be correct. But in the general ftp daemon, you _might_ also
> > need to be able to setuid() to some user (to provide logins), and to
> > chroot (which is not a privileged operation for the hurd anyway). If
> > you want to provide logins, you also need read access to /etc/shadow to
> > be able to verify peoples passwords.
>
> Just because you have no uids does not mean you cannot run addauth.
> And since a user is trying to login in as a specific user, you provide
> that password to the addauth prompt. Therefore, you can run with no
> uids and switch to other users without reading /etc/shadow.
It is probably useful to add here that the server responsible for that is
the password server, which hands out auth handles with uids in exchange for
the password. This server runs as root and sits on /servers/password.
Marcus
--
`Rhubarb is no Egyptian god.' Debian http://www.debian.org brinkmd@debian.org
Marcus Brinkmann GNU http://www.gnu.org marcus@gnu.org
Marcus.Brinkmann@ruhr-uni-bochum.de
http://www.marcus-brinkmann.de
Reply to: