From: Erik A. H. <er...@he...> - 2001-10-14 03:44:11
|
On Tue, Oct 09, 2001 at 11:21:21AM +0200, Janez Pers wrote: > Another question: it seems everything is working now, but only if > I login as root (not surprisingly, as the whole installation was done > with root permisions). > > Somewhere in the docs it was stated that the whole system should work > even without root permisions. However, executing /usr/sbin/bpmaster > as ordinary user gives following error message: The system works *for* non-root users but it cannot (well, should not...) be run by non-root users. What this means is root needs to run the daemons but after that anybody can call bproc_move(), etc. > mmap: permission denied. > > This is not critical, as I intend to load the modules and the master > daemon during the system startup. > > However, running /usr/sbin/bpslave <ip> <port> refused to run with: > > bindresvport: permission denied (ignoring) > /dev/bproc: permission denied > > After I changed the permissions of /dev/bproc with chmod g+rw /dev/bproc > and chgrp /dev/bproc users (I don't know, was that a very stupid thing?) > > the bpslave still refuses to run with: > > bindresvport: permission denied (ignoring) > /dev/bproc: operation not permitted All these problems are related to not being root. Trying to chmod things to the point where anybody can run them is a very bad idea. It creates a huge gaping security hole. (newer revs of bproc remove /dev/bproc and doing that kind of thing isn't even an option...) - Erik -- Erik Arjan Hendriks Printed On 100 Percent Recycled Electrons er...@he... Contents may settle during shipment |