LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   daemons (https://www.linuxquestions.org/questions/linux-security-4/daemons-3951/)

acren 07-04-2001 09:21 AM

daemons
 
I am running Audio Galaxy ( connected to the internet all the time ) as a daemon in the background.
Now I heard that you can run it as a special user ( with no rights ).
But how?

MfG acren

raz 07-04-2001 10:39 AM

Your referring to the users called "nobody"
Look through its configuration files to see if you can change its current id.

I'll go and have a look and see what I can find.

/raz

crabboy 07-04-2001 09:02 PM

You could use the user 'nobody', but to Apache the user nobody is somebody. The nobody user would have rights to whatever files he owned.
I'd suggest that you create a new user called 'agalaxy' (or whatever) and make him non-login able and dedicated to this application ONLY. Set the ownership of the directory and all the Audio Galaxy files to this user, and launch the program as this user.

raz 07-06-2001 04:28 AM

crabboy,

Apache didn't invent the user, it's a standard trust no-one over networks logging name from the BSD days.

If Apache is run correctly the daemon runs as user nobody but the files it runs should be owned by someother user like "webadmin" and group "webstuff" then all the files should have the privileges set with chmod 644.

This way if a bug lets someone run files with the id of the httpd your not going to get very far.

/Raz


All times are GMT -5. The time now is 04:44 PM.