1,443 reputation
2926
bio website 127.0.0.1
location Somewhere in the vicinity of Sol
age 42
visits member for 3 years, 1 month
seen 2 days ago

Apr
16
asked Are there any canned solutions for running sshd in the initrd?
Apr
13
comment Why are web servers traditionally started as superuser?
@TAFKA'goldilocks': isn't that loophole something that could be taken care of by setting the permissions on the binary appropriately? I.e. only group apache or www-data or whatever being allowed to even execute it ... but all fair points.
Apr
13
comment Why are web servers traditionally started as superuser?
@mikeserv: alright, thanks for pointing it out, I'll see what I can come up with.
Apr
13
comment Why are web servers traditionally started as superuser?
@TAFKA'goldilocks': yes, I meant the latter. Keep in mind that epoll is also not available on other platforms and yet web servers make use of it. I already upvoted your answer after your edit. Thanks.
Apr
13
comment Why are web servers traditionally started as superuser?
@mikeserv: would you mind putting that into an answer? Thanks :)
Apr
13
comment Why are web servers traditionally started as superuser?
Thanks, first of all. Alright, this explains it for non-Linux. However, given the package management systems, it would arguably be possible and almost trivial to support either. Also, I added linux specifically because my question referred to a Linux-specific facility. That is to say, your answer dodges the main point of my question (or maybe it really doesn't, but this is how it comes across) :)
Apr
13
asked Why are web servers traditionally started as superuser?
Mar
19
comment How to detect and stop user from deleting particular file on Linux?
You could likely do it by registering a shell that will start other programs always with LD_PRELOAD and an .so that overrides unlink. This way you can limit it to that user and the respective implementation in the .so can limit it to whatever files or paths you want to secure. But the immutable attribute is the better choice as only root can remove it.
Mar
19
asked How to use fslint (in particular findnl) on the command line to actually mimic the behavior of the fslint-gui?
Mar
7
awarded  Yearling
Mar
1
comment Bash script to signal a concurrently running instance (same script) about a condition and increment counter
Phew :) ... grumpy waiters? A reference to a Mitchell and Webb sketch, perhaps? Thanks for your answer!
Feb
27
accepted Bash script to signal a concurrently running instance (same script) about a condition and increment counter
Feb
27
comment Bash script to signal a concurrently running instance (same script) about a condition and increment counter
Guess not, because of the blocking nature of it. Thanks for your answer. As I wrote in my previous comment, better binary than none.
Feb
27
comment Bash script to signal a concurrently running instance (same script) about a condition and increment counter
unfortunately this doesn't help as the counter doesn't get incremented. Any way around this? Of course a binary result is still better than none, but a numeric one would be even better.
Feb
27
asked Bash script to signal a concurrently running instance (same script) about a condition and increment counter
Dec
14
revised How can I reverse the effect of apt-get build-dep <package>?
added 863 characters in body
Dec
14
comment How can I reverse the effect of apt-get build-dep <package>?
This appears to work somewhat, but not reliably, going to edit my question with what that gave me.
Dec
14
asked How can I reverse the effect of apt-get build-dep <package>?
Dec
9
comment ProxyCommand without socat, nc or Bash's TCP redirection?
Thanks for the swift answer!
Dec
9
accepted ProxyCommand without socat, nc or Bash's TCP redirection?