On Dec 2, 2008, at 10:49 AM, Kristian Kielhofner wrote: > This is another important issue that has not really been discussed > before. > > We have a problem here... One of the (main) reasons we run Asterisk > as root is to allow preemption, which requires root privileges. This > is pretty important for an embedded system. > > If you're not using preemption we have the opportunity to run as a > separate user. However, this separate user will also have to share > credentials with the web interface to allow for configuration. > > I've really been interested in implementing SELinux support in > AstLinux for quite some time. Then you can run everything as root and > it doesn't matter ;)... > > Seriously though, SELinux and separate users would be cool. We > would just have to make sure the various components of the system > could use the separate user accounts in a logical manner. > > For instance, the two AstLinux web interfaces practically require > root privileges. Does Lonnie or anyone else care to comment on this?
Kristian, I really don't know enough to answer with authority, but it would seem SELinux may change the current PHP interaction to the system, and that would be bad. Lonnie ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to [EMAIL PROTECTED]
