billiejoex wrote:
> On 23 Ago, 13:13, "Chris Mellon" <[EMAIL PROTECTED]> wrote:
[...]
>> Note that running your process as a user with enough priviledges to
>> impersonate another user pretty much eliminates all the benefits of
>> running as a low-priviledged user in the first place. Consider
>> re-thinking your application model and having an "ftp" user instead.-
>> Nascondi testo tra virgolette -
>>
>> - Mostra testo tra virgolette -
>
> Could you be more precise?
> Why it's not a good idea?
> I was thinking of starting ftpd as limited user ('nobody'/'ftp' on
> unix, 'Guest' on Windows), then temporary switching to another user
> when I got to perform actions on file system.
> Maybe you're saying that as limited user I can't do such switching?
>
That's exactly what he's saying.
regards
Steve
--
Steve Holden +1 571 484 6266 +1 800 494 3119
Holden Web LLC/Ltd http://www.holdenweb.com
Skype: holdenweb http://del.icio.us/steve.holden
--------------- Asciimercial ------------------
Get on the web: Blog, lens and tag the Internet
Many services currently offer free registration
----------- Thank You for Reading -------------
--
http://mail.python.org/mailman/listinfo/python-list
