Feature Requests item #2947028, was opened at 2010-02-06 12:57
Message generated for change (Comment added) made by hmonteiro
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1126468&aid=2947028&group_id=250683

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Elisamuel Resto (user00265)
Assigned to: Nobody/Anonymous (nobody)
Summary: Support changing UID/GID if started as root in daemon mode

Initial Comment:
Not all distributions have smart startup methods to start binaries with a 
specific username. It would be useful if dspam had a way to drop its root 
privileges (when started as such) and use configuration-defined UID/GID when 
started in daemon mode.

When dspam is used from the command line (non-daemon mode) these settings 
should be ignored.

----------------------------------------------------------------------

Comment By: Hugo Monteiro (hmonteiro)
Date: 2010-02-06 18:05

Message:
The seuid/setgid could happen after the port bind, thus allowing the use of
previliged ports (<1024) and still maintain an inferior level of
privileges.

Regards,

Hugo Monteiro.

----------------------------------------------------------------------

Comment By: Julien Valroff (valroff)
Date: 2010-02-06 16:46

Message:
It would also require to change the default server port to an unprivileged
port, or at least state it in dspam.conf that the default port cannot be
used if dspam is started by an unprivileged user.

Cheers,
Julien

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1126468&aid=2947028&group_id=250683

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Dspam-devel mailing list
Dspam-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-devel

Reply via email to