Re: [Twisted-Python] twistd --uid and --logfile

2010-08-19 Thread Phil Mayers
On 08/19/2010 08:30 AM, twisted-...@udmvt.ru wrote: > On Thu, Aug 19, 2010 at 07:22:37AM +0100, Phil Mayers wrote: >> On 08/18/2010 05:01 PM, exar...@twistedmatrix.com wrote: >> I wonder whether one could do something with SELinux today? (As an >> aside, one of the reasons to *not* use twistd is yo

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-19 Thread Phil Mayers
On 08/19/2010 07:55 AM, twisted-...@udmvt.ru wrote: > On Wed, Aug 18, 2010 at 04:35:29PM +0100, Phil Mayers wrote: >> On 18/08/10 10:25, twisted-...@udmvt.ru wrote: >> >>> I think --uid option is too dangerous. >>> sudo or su or setuidgid (from http://cr.yp.to/daemontools.html) is more >>> appropri

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-19 Thread twisted-web
On Thu, Aug 19, 2010 at 07:22:37AM +0100, Phil Mayers wrote: > On 08/18/2010 05:01 PM, exar...@twistedmatrix.com wrote: > I wonder whether one could do something with SELinux today? (As an > aside, one of the reasons to *not* use twistd is you can't separately > label a .tac file - if of course y

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-19 Thread twisted-web
On Wed, Aug 18, 2010 at 04:01:52PM -, exar...@twistedmatrix.com wrote: > On 03:35 pm, p.may...@imperial.ac.uk wrote: > >On 18/08/10 10:25, twisted-...@udmvt.ru wrote: > >>I think --uid option is too dangerous. > >>sudo or su or setuidgid (from http://cr.yp.to/daemontools.html) is > >>more > >>

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-18 Thread twisted-web
On Wed, Aug 18, 2010 at 04:35:29PM +0100, Phil Mayers wrote: > On 18/08/10 10:25, twisted-...@udmvt.ru wrote: > > > I think --uid option is too dangerous. > > sudo or su or setuidgid (from http://cr.yp.to/daemontools.html) is more > > appropriate for changing uids. > > In all cases? I think not.

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-18 Thread Phil Mayers
On 08/18/2010 05:01 PM, exar...@twistedmatrix.com wrote: > On 03:35 pm, p.may...@imperial.ac.uk wrote: >> On 18/08/10 10:25, twisted-...@udmvt.ru wrote: >>> I think --uid option is too dangerous. >>> sudo or su or setuidgid (from http://cr.yp.to/daemontools.html) is >>> more >>> appropriate for cha

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-18 Thread exarkun
On 03:35 pm, p.may...@imperial.ac.uk wrote: >On 18/08/10 10:25, twisted-...@udmvt.ru wrote: >>I think --uid option is too dangerous. >>sudo or su or setuidgid (from http://cr.yp.to/daemontools.html) is >>more >>appropriate for changing uids. > >In all cases? I think not. Making the directory worl

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-18 Thread Phil Mayers
On 18/08/10 10:25, twisted-...@udmvt.ru wrote: > I think --uid option is too dangerous. > sudo or su or setuidgid (from http://cr.yp.to/daemontools.html) is more > appropriate for changing uids. In all cases? I think not. > It will always be hard to design application, that opens some files or >

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-18 Thread twisted-web
On Tue, Aug 17, 2010 at 05:40:34PM -, exar...@twistedmatrix.com wrote: > On 11:35 am, zoran.bosn...@sloveniacontrol.si wrote: > >I am running twisted application from /etc/init/myapp.conf by exec > >statement like this: > >exec /usr/bin/twistd --uid= --gid= --logfile=/var/log/dir/file > > > >Th

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-18 Thread twisted-web
On Tue, Aug 17, 2010 at 01:35:41PM +0200, Zoran Bosnjak wrote: > I am running twisted application from /etc/init/myapp.conf by exec > statement like this: > exec /usr/bin/twistd --uid= --gid= --logfile=/var/log/dir/file > > The problem is when log file is first created under /var/log/dir (dir is >

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-17 Thread exarkun
On 06:14 pm, d...@krondo.com wrote: >On Tue, Aug 17, 2010 at 10:40 AM, wrote: >>On 11:35 am, zoran.bosn...@sloveniacontrol.si wrote: >>>I am running twisted application from /etc/init/myapp.conf by exec >>>statement like this: >>>exec /usr/bin/twistd --uid= --gid= >>>--logfile=/var/log/dir/file

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-17 Thread Dave Peticolas
On Tue, Aug 17, 2010 at 10:40 AM, wrote: > On 11:35 am, zoran.bosn...@sloveniacontrol.si wrote: >>I am running twisted application from /etc/init/myapp.conf by exec >>statement like this: >>exec /usr/bin/twistd --uid= --gid= --logfile=/var/log/dir/file >> >>The problem is when log file is first c

Re: [Twisted-Python] twistd --uid and --logfile

2010-08-17 Thread exarkun
On 11:35 am, zoran.bosn...@sloveniacontrol.si wrote: >I am running twisted application from /etc/init/myapp.conf by exec >statement like this: >exec /usr/bin/twistd --uid= --gid= --logfile=/var/log/dir/file > >The problem is when log file is first created under /var/log/dir (dir >is >owned by user