inn.conf: Support for `newsuser', `newsgrp' options (patch is, hopefully, included)

Ivan Shmakov oneingray at gmail.com
Sat Dec 22 04:30:35 UTC 2007


>>>>> Russ Allbery <rra at stanford.edu> writes:

 >>> ensure_news_user setuids to the news user, which is the wrong thing
 >>> to do for innbind.  It needs to continue running as root and just
 >>> needs to check that its real UID is the same as the news user (for
 >>> security reasons).

 >> Not exactly.  Its signature is:

 >> void ensure_news_user (int may_setuid_p);

 >> When MAY_SETUID_P is false it doesn't try to setuid ().

 > But either way, it expects the effective user to be the news user,
 > right?

	Yes.  It doesn't fit there, right.

 > Or did I misunderstand the intention?  (That's the right thing to do
 > for every program other than innbind.)



More information about the inn-workers mailing list