I might be a good idea to rethink afpd's security model and just have the
   child processes run as root. This seems to work well for samba. Does
   this sound fesable?  What do you think asun?

currently, afpd doesn't handle group situations that well. in the next
development series, i plan to redo the permissions stuff to handle AFP
permission semantics. some of that will entail being clever with
seteuid(). 

-a

Reply via email to