Mailing-List: contact user-help@commons.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Commons Users List" <user@commons.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=nIKFujzp4Cns6nTsFSfNW0tMqS7O5EHHU4Z9i6oRjTlVgJ9Acm/glkFK8gCkxS+PTkTQFxbRqMTWk4L/ewK9+/JXjgAoLyFlGftcZi7TPXWU/yie2Bzv6ZdFd4AEILzs8Sdw8RNfhROguc8SfdEjgEaf5u4IaczV5DnKxINuyBI=;
References: <1325782083.40507.YahooMailNeo@web164508.mail.gq1.yahoo.com>
 <4F05F0E5.6030100@apache.org>
Message-ID: <1325791511.52898.YahooMailNeo@web164509.mail.gq1.yahoo.com>
Date: Thu, 5 Jan 2012 11:25:11 -0800 (PST)
From: Phil Clay <pilf_b@yahoo.com>
Reply-To: Phil Clay <pilf_b@yahoo.com>
Subject: Re: [daemon] compile for use with redhat and debian
To: Commons Users List <user@commons.apache.org>
In-Reply-To: <4F05F0E5.6030100@apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Thanks for the quick reply.=0A=0AI'll create a jira issue for this so it is=
 properly tracked.=A0 I'll look into submitting a patch.=A0 My C is a littl=
e rusty, but it'll probably come back.=0A=0AIf it is easy to explain, could=
 you give a quick summary of why not using libcap is less secure?=A0 i.e. w=
hat is not restricted, or what type of attack would be possible.=0A=0A=0A=
=0A----- Original Message -----=0AFrom: Mladen Turk <mturk@apache.org>=0ATo=
: Commons Users List <user@commons.apache.org>=0ACc: =0ASent: Thursday, Jan=
uary 5, 2012 1:50 PM=0ASubject: Re: [daemon] compile for use with redhat an=
d debian=0A=0AOn 01/05/2012 05:48 PM, Phil Clay wrote:=0A>=0A> 1) Is it pos=
sible to create a single jsvc binary (that uses libcap), that works if eith=
er libcap.so.1 or libcap.so.2 is available at runtime?=0A>=0A=0AIn theory y=
es by using the dlopen("libcap.so") and then dlsym all API's instead linkin=
g.=0AIt is on my TODO list, but if you are in a hurry, feel free to provide=
 a patch.=0AIt'll get into the release faster :)=0A=0A>=0A> 2) I have exper=
imented with disabling libcap when compiling jsvc. This allows jsvc to run =
on both platforms.=A0 What are the implications of this?=A0 Does this resul=
t in a "less secure" binary?=A0 Note that I am using the -user flag to drop=
 the daemon process to a non-root user at runtime.=0A>=0A=0AYep less secure=
.=0A=0A=0ARegards=0A-- =0A^TM=0A=0A----------------------------------------=
-----------------------------=0ATo unsubscribe, e-mail: user-unsubscribe@co=
mmons.apache.org=0AFor additional commands, e-mail: user-help@commons.apach=
e.org

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@commons.apache.org
For additional commands, e-mail: user-help@commons.apache.org