On Fri, February 11, 2005 18:29, Andreas Rottmann said:
> Hi!
>
> Your proposed solution is a step in the right direction, but it has
> the problem that /var/run/radvd would have to be writable by user
> "nobody" which is insecure (e.g. if another daemon running as nobody
> is compromised, it may fill up the parition /var/run/radvd is on).

yes, of course. "a user and a group for every daemon" is really the best
solution.

> As I see it, there's no way around having a separate user for
> radvd. I'll look into this and hopefully get a non-root radvd into
> Sarge.

i'm using sid anyway, so no need to break too many things...

thank you for your concern,
Christian.
-- 
make bzImage, not war



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to