Re: using tcpserver, tcpsvd for security

On Sat, Jan 03, 2004 at 11:35:17AM +0000, Payal Rathod wrote:
> On Sat, Jan 03, 2004 at 09:53:53AM +0000, Gerrit Pape wrote:
> > You're not the first one thinking of this, take a look at ucspi-ipc.
> >  http://www.superscript.com/ucspi-ipc/intro.html
> 
> Oh. I had looked into it. But even after reading it for few times I
> could not understand what is difference between package like ucspi-ipc
> and Dan's ucspi-tcp or Gerrit's ipsvd, regarding what I want to achieve.

ucspi-ipc works with unix domain (stream) sockets, ucspi-tcp with tcp
sockets, and ipsvd with tcp and udp sockets.

The advantages using unix domain sockets for this purpose are (1) you
can use unix file permissions to restrict access for users/groups, (2)
with the usage of getpeereid you can deny/allow connections based on
user ids through the cdb (instead of ips), (3) you can log the uids
connecting to your service.

> I would *highly* appreciate some easy examples on this from someone who
> might have implemented this kind of thing before.

Sorry, I don't have an example at hand.

Regards, Gerrit.