[Dproxy-devel] dproxy-nexgen and userid
Brought to you by:
mattpratt
From: Vesala T. <tv...@iw...> - 2000-05-25 12:26:25
|
Hi, Is it necessary to run dproxy-nexgen with root id? I'm more concerned about possible security risks it might cause. As far as I read the code thru during weekend, I couldn't found any security problems, but program grows and later there might be some problems (and I didn't do any real testing with it, I just read the code) IMO any server shouldn't have more priviledges than it REALLY needs. (And btw, I compiled dproxy at FreeBSD 3.3. Only small change I had to do was to add #include<sys/types.h> to all (or many) source files. (But I can send patches during next week and if I have enough time, I'll implement autoconf scripts to dproxy unless somone is against that idea) Teemu Vesala =) |