Talk:Getting fai-logs a better way: Difference between revisions

From FAIWiki
Jump to navigation Jump to search
No edit summary
 
No edit summary
 
Line 1: Line 1:
== faimond ==
faimond is _no_ security risc.
faimond is _no_ security risc.
It's run by a normal user, not by root. Everybody on a Unix system can start such daemons if the port number is above 1024.
It's run by a normal user, not by root. Everybody on a Unix system can start such daemons if the port number is above 1024.
This daemon only prints strings that it receives via a socket connection, to stdout. The strings received are not used to execute any commands.
This daemon only prints strings that it receives via a socket connection, to stdout. The strings received are not used to execute any commands.
( by Thomas Lange )
:The fact, that a program is run by a normal user doesen't mean it's secure. Even apache drops its rights to a normal user after opening a port.
:I don't say faimond has security holes. I don't know. And i see your point that it is a small and simple solution for a small and simple task. Still i'd trust syslog or syslog-ng more, because it's overlooked by more than one developer.
:I'll try to clearify this in the article. And give your hint, that its easy to replace faimond by syslog.
--[[User:Iw|Iw]] 12:52, 1 Aug 2006 (CEST)

Latest revision as of 10:52, 1 August 2006

faimond

faimond is _no_ security risc. It's run by a normal user, not by root. Everybody on a Unix system can start such daemons if the port number is above 1024. This daemon only prints strings that it receives via a socket connection, to stdout. The strings received are not used to execute any commands. ( by Thomas Lange )

The fact, that a program is run by a normal user doesen't mean it's secure. Even apache drops its rights to a normal user after opening a port.
I don't say faimond has security holes. I don't know. And i see your point that it is a small and simple solution for a small and simple task. Still i'd trust syslog or syslog-ng more, because it's overlooked by more than one developer.
I'll try to clearify this in the article. And give your hint, that its easy to replace faimond by syslog.

--Iw 12:52, 1 Aug 2006 (CEST)