Messages in this thread | | | Date | Wed, 3 Dec 2008 23:08:20 +0000 | From | Alan Cox <> | Subject | Re: New Security Features, Please Comment |
| |
> The children are pre-forked, so the overhead is in the setup... then > when the app recieves a request, it sets the child's uid to the uid of > the website, and then passes the request to the child, which, now, the > child is running as the website owner.
But the child process may already have been trojanned by a previous user so it gains you nothing.
> It is more secure then just doing nothing.
I'm not convinced. Not remotely.
| |