inn.conf: Support for `newsuser', `newsgrp' options (patch is, hopefully, included)

Russ Allbery rra at stanford.edu
Sat Dec 22 04:23:14 UTC 2007


Ivan Shmakov <oneingray at gmail.com> writes:
>>>>>> Russ Allbery <rra at stanford.edu> writes:
>
>  > ensure_news_user setuids to the news user, which is the wrong thing to do
>  > for innbind.  It needs to continue running as root and just needs to check
>  > that its real UID is the same as the news user (for security reasons).
>
> 	Not exactly.  Its signature is:
>
> void ensure_news_user (int may_setuid_p);
>
> 	When MAY_SETUID_P is false it doesn't try to setuid ().

But either way, it expects the effective user to be the news user, right?
Or did I misunderstand the intention?  (That's the right thing to do for
every program other than innbind.)

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>

    Please send questions to the list rather than mailing me directly.
     <http://www.eyrie.org/~eagle/faqs/questions.html> explains why.


More information about the inn-workers mailing list