From COURYHOUSE@aol.com Sun Jun 30 22:52:33 2002
From: COURYHOUSE@aol.com
To: koha-devel@lists.koha-community.org
Subject: Re: [Koha-devel] [Bug 49] Z39.50 module makes too many connections to
the dat...
Date: Sun, 30 Jun 2002 22:53:02 +0000
Message-ID: <176.a8bfc6e.2a514815@aol.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7090138136011748365=="
--===============7090138136011748365==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
"Running as root just to bypass a
file security problem is a bad idea in my opinion."
yes a totally evil idea!=20
ed sharpe!
> Subj:[Koha-devel] [Bug 49] Z39.50 module makes too many connections to the =
> database=20
> Date:6/30/2002 10:46:29 PM US Mountain Standard Time
> From:bugzilla-daemon=
@wilbur.katipo.co.nz
> To:koha-devel@lists.sou=
rceforge.net
> Sent from the Internet=20
>=20
>=20
>=20
> http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=3D49
>=20
>=20
>=20
>=20
>=20
> ------- Additional Comments From am12@bolis.com 2002-07-01 17:45 -------
> It seems to me that running as root then changing user ID's has potential=20
> for
> creating unnecessary bugs or security holes. Running as root just to=20
> bypass a
> file security problem is a bad idea in my opinion. The script doesn't even=
=20
> need
> to write to /var/run. It only needs access to /var/run/koha, which can be =
> owned
> by apache. =20
>=20
> I don't know the various tradeoffs, but potentially the script could be run=
=20
> as
> something other than root or apache, such as daemon. =20
>=20
> And just to reiterate, the whole issue of /var/log or /var/run is
> Linux-specific, and doesn't apply directly to other Unix flavors. Leave=20
> the
> OS-specific items, including file ownership issues, in the shell scripts.
>=20
> The processz3950queue script itself should be as simple as possible.
>=20
>=20
--===============7090138136011748365==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0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--===============7090138136011748365==--