Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.musoftware.de!wum.musoftware.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "J.O. Aho" Newsgroups: comp.lang.php Subject: Re: Exec Security Date: Sat, 01 Sep 2012 23:23:45 +0200 Lines: 27 Message-ID: References: <70901dbf-84a0-475d-a287-6fe420963592@googlegroups.com> <6eb65973-56a8-45f6-8ed7-9a4cc088f35d@googlegroups.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Trace: individual.net bNqZhSOmd/3FGvaMEi9OvgDawPJC3ZTIUmCNsNxFjW7OoxpORtbZFRdG/ilwN4yo0m Cancel-Lock: sha1:DhDfUYleJ20lbMxudA4RDRHoG48= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20120807 Thunderbird/14.0 In-Reply-To: <6eb65973-56a8-45f6-8ed7-9a4cc088f35d@googlegroups.com> Xref: csiph.com comp.lang.php:6928 On 01/09/12 20:50, Ryan wrote: > Can you please eplain what you mean about the per site pho.ink being misused? If you allow a instance have access to exec from which you allow service be restarted (either full root access or sudo), then there is always a risk that someone can manage to execute something you thought was possible, this could lead to the whole machine is compromised. > A daemon is a waste at resources IMO since its always running though most of the time it will do nothing. Daemon ain't a waste of resources if you do it the right way, let it idle till it gets a message, it will make a small memory imprint, it will not waist many cpu cycles while not doing anything and you increase the security of your system. I have seen a database based solution running on quite many servers, including web servers, database servers, dns and mail server been handle this way, the resources used by the provisioning software was quite small, would go as far as say it's not measurable. -- //Aho