At 10:52 AM 2/12/2004, Steve Moore wrote:
When I run razor-check in debug mode it finds /etc/razor/razor-agent.conf but then it complains that there is no razorhome. Can anyone suggest how I set razorhome? I set it to /etc/razor in /etc/razor/razor-agent.conf. A snippet of the razor-check output and a copy of /etc/razor/razor-agent.conf is included below. Thanks in advance for any comments.


Don't set razorhome if you don't need to. The default of putting it into ~/.razor _is_ what you want to do in nearly every situation.


By setting it to /etc/razor, you're forcing EVERY user on your system to use one razorhome directory.


If that directory isn't world-writable, then most users won't be able to use the razor home.

If you make the directory world-writable, then you are opening a possible vector of attack on your system.

Most programs like razor aren't super-paranoid about parsing config files. It's very easy for a small mistake in parsing to cause a non-root user to be able to gain privileges of any user running razor (including root) if you have a world-writable razor home.



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Razor-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/razor-users

Reply via email to