Dropping Root
John Turner
john.turner at norgg.org
Tue Mar 11 11:10:00 EDT 2008
I was using Process::UID.change_privilege(uid), which seems to do the
job (in irb at least) where Process.uid= doesn't, it seems like it
should though. There's grant_privelege too, but I don't know what the
difference between that and change_privilege is.
Hope that helps.
John
On 11/03/2008, Jonathan Stott <jonathan.stott at gmail.com> wrote:
> No, junebug uses the Mongrel Camping handler (which is set up in the same postamble) which I know is invoked, as I can change messages in there and they are reflected in the logs, for example.
>
> the postamble looks like:
> connect to DB
> create tables
> Invoke the Mongrel::Camping handler
> set up some signal traps
> join the server thread.
> (or see a pastie of the actual code here:
> http://pastie.caboo.se/164364 )
>
> I'm trying to set the uid via 'Process.uid = ###', which I've tried at various points through the post amble, both before and after the join, but it still seems to be running as root when I check ps.
>
> Regards, Jonathan
>
>
> On Tue, 11 Mar 2008 11:42:52 +0000
> "John Turner" <john.turner at norgg.org> wrote:
>
> > I was playing with some setuid and camping for a project myself. I
> > don't see if you've mentioned this, but I assume you're using the
> > camping server to run it? I ended up just editing the camping server
> > script to change uid and chroot just after its requires (I also edited
> > it to do all its requires up front because I was chrooting and to just
> > use mongrel just because). I'm not sure what the problem with doing
> > this in the postamble would be though, are you sure it's getting run?
> > Is it getting run every time camping reloads the script? How exactly
> > are you setting the uid?
> >
> > John
> >
>
> _______________________________________________
> Camping-list mailing list
> Camping-list at rubyforge.org
> http://rubyforge.org/mailman/listinfo/camping-list
>
More information about the Camping-list
mailing list