Re: root perms / rewritemap prg / module system()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2016-06-08 at 08:01 -0400, Eric Covener wrote:
> On Sat, Apr 16, 2016 at 6:00 PM, Ben RUBSON <ben.rubson@xxxxxxxxx> wrote:
> > Then my question is, could it be possible ?
> 
> You would need your own daemon launched during an early hook (like
> post_config).  You wouldn't be able to respond [directly] to requests,
> you'd need to reach out over something like a pipe the way rewritemap
> does.
> 
A hacked suexec would be a per-request option.  Or using
solaris and mod_privileges might just possibly help with
more fine-grained escalation.

Bear in mind that anything running as root is, at the very least,
a big security concern, and I would NOT recommend the above
unless it was an alternative to something yet worse!
Rewritemap at least has the advantage of history and exposure.

-- 
Nick Kew


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux