trafficserver and raw disk access in FreeBSD

2012-07-22 Thread ming....@gmail.com
Apache Traffic Server may use raw disk for caching, and for privilege
elevation, the worker process(traffic_server) will setuid to nobody, my
question is, how to make traffic_server access the /dev/ada*?

in linux, disk permitting is root:disk 0660, we can go with:
1, setup a new user 'ats', and put it into 'disk' group
2, after setuid, run initgroups() to complete the groups evn.


we need a safe and easy to implement way for raw disk access in
FreeBSD. 

thanks for you help

-- 
zym, Zhao Yongming.
aka: yonghao @ taobao.com


signature.asc
Description: This is a digitally signed message part


Re: trafficserver and raw disk access in FreeBSD

2012-07-22 Thread ming....@gmail.com
yeah, rules in devfs always work. and it may introduce more challenge on
operation management, is there any way that we can do it more clean?

should we set the permission for :operator g+w on disks and partitions?
then we can put a dedicate user for trafficserver into operator group.


在 2012-07-22日的 17:03 +0200,Wojciech Puchar写道:
  Apache Traffic Server may use raw disk for caching, and for privilege
  elevation, the worker process(traffic_server) will setuid to nobody, my
  question is, how to make traffic_server access the /dev/ada*?
 
  in linux, disk permitting is root:disk 0660, we can go with:
  1, setup a new user 'ats', and put it into 'disk' group
  2, after setuid, run initgroups() to complete the groups evn.
 
 devfs.conf

-- 
zym, Zhao Yongming.
aka: yonghao @ taobao.com


signature.asc
Description: This is a digitally signed message part