Unprivileged user?

Per Andreas Buer perbu at linpro.no
Tue Apr 15 08:03:02 CEST 2008


Ricardo Newbery skrev:
> I'm trying to understand the purpose of the "-u user" option for  
> varnishd.  It appears that even when starting up as root, and the  
> child process dropping to "nobody", Varnish is still saving and  
> serving from cache even though "nobody" doesn't have read/write access  
> to the storage file owned by root.

In Unix, if you drop privileges, you still have access to all your open 
files. Access control happens when you open files. That should answer 
the rest of your questions too, I believe.


Per.



More information about the varnish-misc mailing list