lkml.org 
[lkml]   [2008]   [Dec]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: New Security Features, Please Comment
> The children are pre-forked, so the overhead is in the setup... then
> when the app recieves a request, it sets the child's uid to the uid of
> the website, and then passes the request to the child, which, now, the
> child is running as the website owner.

But the child process may already have been trojanned by a previous user
so it gains you nothing.

> It is more secure then just doing nothing.

I'm not convinced. Not remotely.



\
 
 \ /
  Last update: 2008-12-04 00:11    [W:0.194 / U:0.704 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site