Re: Distributed objects: connecting to a process running as root?
Re: Distributed objects: connecting to a process running as root?
- Subject: Re: Distributed objects: connecting to a process running as root?
- From: James Bucanek <email@hidden>
- Date: Sun, 30 Apr 2006 09:34:02 -0700
James Bucanek wrote on Saturday, April 29, 2006:
>I haven't found this documented anywhere. I remember it being discussed on the list, but never any
>definitive answer.
>
>Can an application connect to a daemon using distributed objects via a named port if the application
>is running as the user and the daemon is running as root? I remember someone commenting that a
>user-level process can't connect with a root process using DO for "security reasons."
Responding to my own post, this is apparently a big lie. Either the person who started this rumor was talking about something else, or simply assumed that one shouldn't connect to a process running as root using distributed objects on principle.
This morning I created a test server and client. Using NSConnection, I connected to the server while it was running as a regular user and as root. I repeated this test under 10.3.0, 10.3.9, and 10.4.6. I repeated the experiment again running the sever as 'nobody'. All connections were successful.
So I'm pushing ahead with plans for a single scheduling daemon that runs as nobody.
--
James Bucanek
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden