Do you think there will be any movement on the use of non-root accounts
being used to run processes? I would be interested in hearing the outcome
of any future discussions.
Cheers,
Greig
> On Tue, 24 Oct 2006 13:17:36 +0100
> Greig A Cowan <[log in to unmask]> wrote:
>
> > Hi all,
> >
> > Here is some information from the dCache SRM developer regarding
> > the new SRM tomcat service.
> >
> > > Question 2:
> > >
> > > Also, the tomcat process is running as root. Is there any way to run
> > > it under a user account?
> >
> > Yes, root access is needed, since for some operations srm has to get
> > certain attributes directly from pnfs.
> >
> > Thanks,
> > Timur
> > -----------
> >
> > So if you install 1.7.0-16 then you should make sure the above ports
> > can't be accessed.
> >
> > It's still not clear to me wny things have to run as root in dCache.
> > Maybe Owen can comment further.
>
> We at DESY thought it was possible, because of the permission manger
> provides all the functions srm should need, pnfs-manager should run as
> root though as it needs to interact with pnfs.
>
> We at DESY, it appears, are incorrect in our assumptions.
>
> Regards
>
> Owen
>
--
=======================================================================
Dr Greig A Cowan http://www.ph.ed.ac.uk/~gcowan1
School of Physics, University of Edinburgh, James Clerk Maxwell Building
TIER-2 STORAGE SUPPORT PAGES: http://wiki.gridpp.ac.uk/wiki/Grid_Storage
=======================================================================
|