Re: [webmin-devel] Logging remote commands

[Andrew K. <ak...@co...>]

Thanks Jamie. The reason I was interested in usermin logging was that I 
was toying with
the idea of using Usermin/Webmin as an application server. We have all 
the necessary components,
Webmin, MySQL, etc. A thought.

-Andrew

Jamie Cameron wrote:

>The main Usermin webserver process runs as root, and all CGI scripts are
>run as root initially, but most drop their privileges down to the level
>of the logged-in user before doing anything. So writing to global log
>files after some action is performed is not possible .. although there
>may be ways around this by pre-opening the log file before dropping root
>privileges.
>
>In my opinion, logging in Usermin isn't as important as in Webmin, as
>the amount of damage the user can be is less :-)
>
> - Jamie
>
>On Thu, 2004-02-12 at 10:40, Andrew Kornak wrote:
>  
>
>>Forgive for my ignorance, but, how would that effect Usermin activity? 
>>Usermin runs as root
>>as does Webmin. Couldn't Usermin activity be logged in the same fashion? 
>>Why would a module's
>>privileges matter if the master process has root privileges.  Thanks.
>>
>>-Andrew
>>
>>Jamie Cameron wrote:
>>
>>    
>>
>>>Currently, logging by Usermin is not supported .. and it would be tough
>>>to implement a central log like Webmin has, as most Usermin modules run
>>>with non-root privileges.
>>>
>>>- Jamie
>>>
>>>On Thu, 2004-02-12 at 09:44, Andrew Kornak wrote:
>>> 
>>>
>>>      
>>>
>>>>This brought me to think about logging in "Usermin". Is there a way to
>>>>to log Usermin activity like Webmin has? I was unable to find an option
>>>>to do this.
>>>>
>>>>-Andrew
>>>>
>>>>Jamie Cameron wrote:
>>>>
>>>>   
>>>>
>>>>        
>>>>
>>>>>On Thu, 2004-02-12 at 02:25, John Horne wrote:
>>>>>
>>>>>
>>>>>     
>>>>>
>>>>>          
>>>>>
>>>>>>Hello,
>>>>>>
>>>>>>As far as I can tell, using webmin 1.130, if I use 'remote_eval' in a
>>>>>>module to execute something on a remote server nothing gets logged by
>>>>>>webmin on the remote server. Would it be possible to get the command
>>>>>>logged? Access to the remote server is by fastrpc with a username/pwd
>>>>>>supplied. I'm not totally sure how webmin communicates with the remote
>>>>>>server so I'm not too sure what is/is not possible! :-)
>>>>>>  
>>>>>>
>>>>>>       
>>>>>>
>>>>>>            
>>>>>>
>>>>>You would have to use code like :
>>>>>
>>>>>remote_foreign_call($server, $module, "system_logged", $your_command);
>>>>>remote_foreign_call($server, $module, "webmin_log", "whatever");
>>>>>
>>>>>Most modules do their logging on the 'master' side rather than the
>>>>>'slave' side .. however, this would still work fine.
>>>>>
>>>>>- Jamie
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>-------------------------------------------------------
>>>>>SF.Net is sponsored by: Speed Start Your Linux Apps Now.
>>>>>Build and deploy apps & Web services for Linux with
>>>>>a free DVD software kit from IBM. Click Now!
>>>>>http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
>>>>>-
>>>>>Forwarded by the Webmin development list at web...@we...
>>>>>To remove yourself from this list, go to
>>>>>http://lists.sourceforge.net/lists/listinfo/webadmin-devel
>>>>>
>>>>>
>>>>>
>>>>>     
>>>>>
>>>>>          
>>>>>
>>>>-------------------------------------------------------
>>>>SF.Net is sponsored by: Speed Start Your Linux Apps Now.
>>>>Build and deploy apps & Web services for Linux with
>>>>a free DVD software kit from IBM. Click Now!
>>>>http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
>>>>-
>>>>Forwarded by the Webmin development list at web...@we...
>>>>To remove yourself from this list, go to
>>>>http://lists.sourceforge.net/lists/listinfo/webadmin-devel
>>>>   
>>>>
>>>>        
>>>>
>>>
>>>-------------------------------------------------------
>>>SF.Net is sponsored by: Speed Start Your Linux Apps Now.
>>>Build and deploy apps & Web services for Linux with
>>>a free DVD software kit from IBM. Click Now!
>>>http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
>>>-
>>>Forwarded by the Webmin development list at web...@we...
>>>To remove yourself from this list, go to
>>>http://lists.sourceforge.net/lists/listinfo/webadmin-devel
>>>
>>> 
>>>
>>>      
>>>
>>-------------------------------------------------------
>>SF.Net is sponsored by: Speed Start Your Linux Apps Now.
>>Build and deploy apps & Web services for Linux with
>>a free DVD software kit from IBM. Click Now!
>>http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
>>-
>>Forwarded by the Webmin development list at web...@we...
>>To remove yourself from this list, go to
>>http://lists.sourceforge.net/lists/listinfo/webadmin-devel
>>    
>>
>
>
>
>-------------------------------------------------------
>SF.Net is sponsored by: Speed Start Your Linux Apps Now.
>Build and deploy apps & Web services for Linux with
>a free DVD software kit from IBM. Click Now!
>http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
>-
>Forwarded by the Webmin development list at web...@we...
>To remove yourself from this list, go to
>http://lists.sourceforge.net/lists/listinfo/webadmin-devel
>
>  
>