inn.conf: Support for `newsuser', `newsgrp' options (patch is, hopefully, included)
Russ Allbery
rra at stanford.edu
Sat Dec 22 04:23:14 UTC 2007
Ivan Shmakov <oneingray at gmail.com> writes:
>>>>>> Russ Allbery <rra at stanford.edu> writes:
>
> > ensure_news_user setuids to the news user, which is the wrong thing to do
> > for innbind. It needs to continue running as root and just needs to check
> > that its real UID is the same as the news user (for security reasons).
>
> Not exactly. Its signature is:
>
> void ensure_news_user (int may_setuid_p);
>
> When MAY_SETUID_P is false it doesn't try to setuid ().
But either way, it expects the effective user to be the news user, right?
Or did I misunderstand the intention? (That's the right thing to do for
every program other than innbind.)
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
Please send questions to the list rather than mailing me directly.
<http://www.eyrie.org/~eagle/faqs/questions.html> explains why.
More information about the inn-workers
mailing list