On 18 February 2015 at 20:19, Poul-Henning Kamp <[email protected]> wrote:
> In message <[email protected]>, Poul-Henning > Kamp > writes: > > > Move creation of workdir into jail code, and use the master HIGH/LOW > > around socket operations which may be on reserved ports. > > This is all presuming jail=unix which means Varnish was started as root. > > I am uncertain if creating/opening the storage files should be done > at "MASTER_HIGH" (= root) or "MASTER_LOW" (= varnish user) privilege > level. > We've been looking at the option of having block device as storage instead of going through the filesystem. These devices usually have special rules setting up the permissions and such on each boot, making it useful to be root to avoid permission problems when opening the device. (Changing the rules to assign the device to the specified user is probably the "right" way of doing things though). Martin > > I'm sort of leaning "MASTER_HIGH" on general principles, but if anybody > has input, I'd like to hear it... > > -- > Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 > [email protected] | TCP/IP since RFC 956 > FreeBSD committer | BSD since 4.3-tahoe > Never attribute to malice what can adequately be explained by incompetence. > > _______________________________________________ > varnish-dev mailing list > [email protected] > https://www.varnish-cache.org/lists/mailman/listinfo/varnish-dev > -- <http://varnish-software.com>*Martin Blix Grydeland* Senior Developer | Varnish Software AS Mobile: +47 992 74 756 We Make Websites Fly!
_______________________________________________ varnish-dev mailing list [email protected] https://www.varnish-cache.org/lists/mailman/listinfo/varnish-dev
