Re: [Moosefs-users] Fwd: Caveats to running MFS under root

[Laurent W. <lw...@hy...>]

On Thu, 8 Jul 2010 21:51:23 +0300
Stas Oskin <sta...@gm...> wrote:

> Sorry, forwarding to list as well.
> 
> ---------- Forwarded message ----------
> Hi.
> 
> 
> > Generally speaking, MooseFS should not be run as a user nobody. If user
> > nobody has some other services running and if somebody gets  control over
> > one service, it can interfere other services run on the same user. We
> > recommend just creating a user mfs and a group mfs.
> >
> >
> This makes sense.
> 
> 
> Laurent, that should be a good addition to that RPM ;).
I need to take a look at how RPM handles user creation. I don't know
how it acts when auth deals with nis/ldap/whatever.
Added on my TODO list, as well as the log replay on startup, if Michal
confirms it's a good idea.
> 
> Maybe we also should consider placing a script, which would assign proper
> permissions to selected data folders.
As told in a previous mail, problem is DATA_PATH is configurable after
installation.
Regards,
-- 
Laurent Wandrebeck
HYGEOS, Earth Observation Department / Observation de la Terre
Euratechnologies
165 Avenue de Bretagne
59000 Lille, France
tel: +33 3 20 08 24 98
http://www.hygeos.com
GPG fingerprint/Empreinte GPG: F5CA 37A4 6D03 A90C 7A1D  2A62 54E6 EF2C
D17C F64C