Matt,

I found the snippets, I understand that it is crazy,
but, let me ask you. If I run as "root" what is the
worse case scenerio, given that nobody knows the
password?

Diego

--- Matt Sullivan <[EMAIL PROTECTED]> wrote:
> On Fri, 12 Jul 2002, Diego Montalvo wrote:
> 
> > hello,
> > 
> > I was wanting to change aspseek back ro running
> from
> > root.  ASPSeek 1.15 allowed me to use "root" to
> run
> > processes,now I must use another user.  What do I
> have
> > to change inorder to use "root" instead of another
> > user?
> 
> You would need to change appropriate snippets of
> code in daemon.cpp and
> index.cpp.  However, I would strongly advise against
> doing this unless you have
> a thorough understanding of the security
> implications and you accept that
> compromise of your systems is a risk you are
> prepared to take. 
> 
> This is not to say that ASPseek is insecure, the
> scope of this issue is far
> more generalised than to be specific to ASPseek.  If
> you posed this question to
> any good security professional they would certainly
> look at you like you just
> arrived from another planet ;) 
> 
> 
> Matt.
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Autos - Get free new car price quotes
http://autos.yahoo.com

Reply via email to