Re: [Erlyaws-list] Re: stopping yaws security

[Claes W. <kl...@ta...>]

Fredrik Thulin wrote:

> 
> What prevents me from connecting to all listening ports on 127.0.0.1 and 
> sending a 'stop if you're a Yaws server' command? I don't need read 
> permissions to other peoples /tmp/yaws/myid/ctl files since there is a 
> very limited range of possible port numbers.
> 


Nothing ... actually. So you are right, Yaws needs a friendly
environment. The situation is fixable though if someone needs it.
One easy solution would be to

R = read_port_no(),
Cookie = read($HOME/.erlang.cookie),
Sock = cnct(R),
write(Sock, ["stop", Cookie])

.. sortof.


Actually, this is a good idea, even in a friendly environment.


/klacke

-- 
Claes Wikstrom                        -- Caps lock is nowhere and
http://www.tail-f.com                 -- everything is under control
cellphone: +46 70 2097763