Unprivileged user?

Stig Sandbeck Mathisen ssm at linpro.no
Thu Apr 17 08:44:08 CEST 2008


On Wed, 16 Apr 2008 06:56:37 +0000, "Poul-Henning Kamp" <phk at phk.freebsd.dk> said:

> In message <7xd4oqe4c2.fsf at iostat.linpro.no>, Stig Sandbeck Mathisen writes:

>> * Read access to where you store your VCL files

> No, the vcl files are read by the master process which does not drop
> priviledge.

>> * Execute a C compiler

> Same.

>> * Write access to its cache directory, to store the compiled
>> configuration

> Same.

In other words, I mixed up the parent and child process regarding
configuration file handling and compiling.  :/

-- 
Stig Sandbeck Mathisen, Linpro

Any sufficiently advanced incompetence is indistinguishable from malice.



More information about the varnish-misc mailing list