inn.conf: Support for `newsuser', `newsgrp' options (patch is, hopefully, included)
Ivan Shmakov
oneingray at gmail.com
Sat Dec 22 04:30:35 UTC 2007
>>>>> Russ Allbery <rra at stanford.edu> writes:
>>> ensure_news_user setuids to the news user, which is the wrong thing
>>> to do for innbind. It needs to continue running as root and just
>>> needs to check that its real UID is the same as the news user (for
>>> security reasons).
>> Not exactly. Its signature is:
>> void ensure_news_user (int may_setuid_p);
>> When MAY_SETUID_P is false it doesn't try to setuid ().
> But either way, it expects the effective user to be the news user,
> right?
Yes. It doesn't fit there, right.
> Or did I misunderstand the intention? (That's the right thing to do
> for every program other than innbind.)
More information about the inn-workers
mailing list