On Friday 15 August 2003 04.24, aqil wrote:

> Binary or copy of kill setuserid ?
> Could you explain further ?

As already mentioned by another user in this thread sudo is a much 
better alternative.

To make a setuserid squid copy of kill you do

  cp /bin/kill /home/operator/bin/kill-squid
  chown squid /home/operator/bin/kill-squid
  chmod u+s /home/operator/bin/kill-squid
  chmod og= /home/operator/bin/

This gives a program which "operator" can use to send signals to 
processes with the privilege of the "squid" user thus allowing him to 
reconfigure Squid by running "bin/kill-squid -HUP pidofsquid". If 
your cache_effective_user is not "squid" then substitute "squid" with 
your cache_efffective_user in the chown line above..



Regards
Henrik

Reply via email to