Re: Distributed objects: connecting to a process running as root?
Re: Distributed objects: connecting to a process running as root?
- Subject: Re: Distributed objects: connecting to a process running as root?
- From: Andrei Tchijov <email@hidden>
- Date: Sat, 29 Apr 2006 14:17:18 -0400
J.
You are so very right. Completely forget about it though using this
feature myself all the time.
Andrei
On Apr 29, 2006, at 2:13 PM, Jordan Krushen wrote:
On 4/29/06, James Bucanek <email@hidden> wrote:
This must be run as a daemon since it needs to run all of the
time, which means that it has to run as root since StartupItems
and launchd have no concept of a "user level" daemon.
On 4/29/06, Andrei Tchijov <email@hidden> wrote:
If your daemon does not need any additional privileges which come as
a result of running as root, than you can actually "downgrade" your
daemon to ANY user using setuid() function (man setuid for more
info). This probably will be good idea, because you should not have
pieces running as root if you do not want/need extra privileges.
Does nobody read documentation anymore? From the launchd.plist
man page:
A daemon or agent launched by launchd SHOULD NOT do the
following as a
part of their startup initialization:
o Setup the user ID or group ID.
.. and further down:
UserName <string>
This optional key specifies the user to run the job as. The
default is
the user who submitted the job to launchd.
GroupName <string>
This optional key specifies the user to run the job as. The
default is
the group of the user who submitted the job to launchd.
J.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden