Re: [webmin-devel] Logging remote commands

[Jamie C. <jca...@we...>]

The main Usermin webserver process runs as root, and all CGI scripts are
run as root initially, but most drop their privileges down to the level
of the logged-in user before doing anything. So writing to global log
files after some action is performed is not possible .. although there
may be ways around this by pre-opening the log file before dropping root
privileges.

In my opinion, logging in Usermin isn't as important as in Webmin, as
the amount of damage the user can be is less :-)

 - Jamie

On Thu, 2004-02-12 at 10:40, Andrew Kornak wrote:
> Forgive for my ignorance, but, how would that effect Usermin activity? 
> Usermin runs as root
> as does Webmin. Couldn't Usermin activity be logged in the same fashion? 
> Why would a module's
> privileges matter if the master process has root privileges.  Thanks.
> 
> -Andrew
> 
> Jamie Cameron wrote:
> 
> >Currently, logging by Usermin is not supported .. and it would be tough
> >to implement a central log like Webmin has, as most Usermin modules run
> >with non-root privileges.
> >
> > - Jamie
> >
> >On Thu, 2004-02-12 at 09:44, Andrew Kornak wrote:
> >  
> >
> >>This brought me to think about logging in "Usermin". Is there a way to
> >>to log Usermin activity like Webmin has? I was unable to find an option
> >>to do this.
> >>
> >>-Andrew
> >>
> >>Jamie Cameron wrote:
> >>
> >>    
> >>
> >>>On Thu, 2004-02-12 at 02:25, John Horne wrote:
> >>> 
> >>>
> >>>      
> >>>
> >>>>Hello,
> >>>>
> >>>>As far as I can tell, using webmin 1.130, if I use 'remote_eval' in a
> >>>>module to execute something on a remote server nothing gets logged by
> >>>>webmin on the remote server. Would it be possible to get the command
> >>>>logged? Access to the remote server is by fastrpc with a username/pwd
> >>>>supplied. I'm not totally sure how webmin communicates with the remote
> >>>>server so I'm not too sure what is/is not possible! :-)
> >>>>   
> >>>>
> >>>>        
> >>>>
> >>>You would have to use code like :
> >>>
> >>>remote_foreign_call($server, $module, "system_logged", $your_command);
> >>>remote_foreign_call($server, $module, "webmin_log", "whatever");
> >>>
> >>>Most modules do their logging on the 'master' side rather than the
> >>>'slave' side .. however, this would still work fine.
> >>>
> >>>- Jamie
> >>>
> >>>
> >>>
> >>>
> >>>-------------------------------------------------------
> >>>SF.Net is sponsored by: Speed Start Your Linux Apps Now.
> >>>Build and deploy apps & Web services for Linux with
> >>>a free DVD software kit from IBM. Click Now!
> >>>http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
> >>>-
> >>>Forwarded by the Webmin development list at web...@we...
> >>>To remove yourself from this list, go to
> >>>http://lists.sourceforge.net/lists/listinfo/webadmin-devel
> >>>
> >>> 
> >>>
> >>>      
> >>>
> >>-------------------------------------------------------
> >>SF.Net is sponsored by: Speed Start Your Linux Apps Now.
> >>Build and deploy apps & Web services for Linux with
> >>a free DVD software kit from IBM. Click Now!
> >>http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
> >>-
> >>Forwarded by the Webmin development list at web...@we...
> >>To remove yourself from this list, go to
> >>http://lists.sourceforge.net/lists/listinfo/webadmin-devel
> >>    
> >>
> >
> >
> >
> >-------------------------------------------------------
> >SF.Net is sponsored by: Speed Start Your Linux Apps Now.
> >Build and deploy apps & Web services for Linux with
> >a free DVD software kit from IBM. Click Now!
> >http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
> >-
> >Forwarded by the Webmin development list at web...@we...
> >To remove yourself from this list, go to
> >http://lists.sourceforge.net/lists/listinfo/webadmin-devel
> >
> >  
> >
> 
> 
> -------------------------------------------------------
> SF.Net is sponsored by: Speed Start Your Linux Apps Now.
> Build and deploy apps & Web services for Linux with
> a free DVD software kit from IBM. Click Now!
> http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
> -
> Forwarded by the Webmin development list at web...@we...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-devel