Re: Exec Security

Path	csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.musoftware.de!wum.musoftware.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	"J.O. Aho" <user@example.net>
Newsgroups	comp.lang.php
Subject	Re: Exec Security
Date	Sat, 01 Sep 2012 23:23:45 +0200
Lines	27
Message-ID	<aafcn1Ft19U1@mid.individual.net> (permalink)
References	<70901dbf-84a0-475d-a287-6fe420963592@googlegroups.com> <b94dded5-3893-4f01-9fcc-d485f22d2217@googlegroups.com> <aae9amFm0eU1@mid.individual.net> <6eb65973-56a8-45f6-8ed7-9a4cc088f35d@googlegroups.com>
Mime-Version	1.0
Content-Type	text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding	7bit
X-Trace	individual.net bNqZhSOmd/3FGvaMEi9OvgDawPJC3ZTIUmCNsNxFjW7OoxpORtbZFRdG/ilwN4yo0m
Cancel-Lock	sha1:DhDfUYleJ20lbMxudA4RDRHoG48=
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20120807 Thunderbird/14.0
In-Reply-To	<6eb65973-56a8-45f6-8ed7-9a4cc088f35d@googlegroups.com>
Xref	csiph.com comp.lang.php:6928

Show key headers only | View raw

On 01/09/12 20:50, Ryan wrote:
> Can you please eplain what you mean about the per site pho.ink being misused?

If you allow a instance have access to exec from which you allow service 
be restarted (either full root access or sudo), then there is always a 
risk that someone can manage to execute something you thought was 
possible, this could lead to the whole machine is compromised.

> A daemon is a waste at resources IMO since its always running though most of the time it will do nothing.

Daemon ain't a waste of resources if you do it the right way, let it 
idle till it gets a message, it will make a small memory imprint, it 
will not waist many cpu cycles while not doing anything and you increase 
the security of your system.

I have seen a database based solution running on quite many servers, 
including web servers, database servers, dns and mail server been handle 
this way, the resources used by the provisioning software was quite 
small, would go as far as say it's not measurable.

-- 

  //Aho

Back to comp.lang.php | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Exec Security Ryan <rbilesky@gmail.com> - 2012-08-31 18:49 -0700
  Re: Exec Security Jerry Stuckle <jstucklex@attglobal.net> - 2012-08-31 22:12 -0400
  Re: Exec Security "J.O. Aho" <user@example.net> - 2012-09-01 08:54 +0200
  Re: Exec Security Ryan <rbilesky@gmail.com> - 2012-09-01 02:51 -0700
    Re: Exec Security "J.O. Aho" <user@example.net> - 2012-09-01 13:19 +0200
      Re: Exec Security Ryan <rbilesky@gmail.com> - 2012-09-01 11:50 -0700
        Re: Exec Security Ryan <rbilesky@gmail.com> - 2012-09-01 13:19 -0700
          Re: Exec Security Jerry Stuckle <jstucklex@attglobal.net> - 2012-09-01 16:26 -0400
            Re: Exec Security Ryan <rbilesky@gmail.com> - 2012-09-01 14:11 -0700
              Re: Exec Security Jerry Stuckle <jstucklex@attglobal.net> - 2012-09-01 19:14 -0400
                Re: Exec Security Ryan <rbilesky@gmail.com> - 2012-09-01 17:17 -0700
                Re: Exec Security "J.O. Aho" <user@example.net> - 2012-09-02 09:25 +0200
                Re: Exec Security The Natural Philosopher <tnp@invalid.invalid> - 2012-09-02 12:02 +0100
                Re: Exec Security Ryan <rbilesky@gmail.com> - 2012-09-02 20:32 -0700
                Re: Exec Security Jerry Stuckle <jstucklex@attglobal.net> - 2012-09-02 23:43 -0400
                Re: Exec Security Ryan <rbilesky@gmail.com> - 2012-09-02 20:53 -0700
                Re: Exec Security "J.O. Aho" <user@example.net> - 2012-09-03 06:55 +0200
        Re: Exec Security "J.O. Aho" <user@example.net> - 2012-09-01 23:23 +0200

csiph-web