Re: Outstanding question

Adrian Ho <[email protected]> Mon, 10 Feb 2003 10:35:40 +0800
Newsgroups gmane.comp.djb.publicfile
Message-ID <[email protected]>
On Sun, Feb 09, 2003 at 06:33:54PM -0500, Jeff King wrote:
> > > As a one-off test, simply replace the call to httpd in your run script
> > > with /usr/bin/id (or whatever utility you use to determine the real and
> > > effective UIDs/GIDs on your system) and restart the service.  Then telnet
> > > to your httpd port and see for yourself.  Once you're satisfied, undo
> > > the above change and restart the service again.
> 
> This is incorrect advice. tcpserver does have an option to read the
> UID/GID environment variables and automatically switch ids (while
> waiting for connections). However, publicfile is not able to use them
> because it also wants to chroot. [...]

Oops, my bad.  The fact that I wasn't looking at actual httpd/ftpd
startup scripts when I wrote that should now be painfully obvious.

- Adrian