From owner-freebsd-questions  Thu Oct 10  3: 8:46 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C351537B401
	for <freebsd-questions@freebsd.org>; Thu, 10 Oct 2002 03:08:44 -0700 (PDT)
Received: from smtp010.tiscali.dk (smtp010.tiscali.dk [212.54.64.103])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EBF7C43E91
	for <freebsd-questions@freebsd.org>; Thu, 10 Oct 2002 03:08:43 -0700 (PDT)
	(envelope-from db@traceroute.dk)
Received: from rafter. (213.237.112.252.adsl.arsy.worldonline.dk [213.237.112.252])
	by smtp010.tiscali.dk (8.12.5/8.12.5) with SMTP id g9AA8bbR003005;
	Thu, 10 Oct 2002 12:08:38 +0200 (MEST)
From: Socketd <db@traceroute.dk>
Date: Thu, 10 Oct 2002 10:13:53 GMT
Message-ID: <20021010.10135300.3745751216@rafter.>
Subject: Re: Security questions
To: Giorgos Keramidas <keramida@ceid.upatras.gr>,
	freebsd-questions@freebsd.org
In-Reply-To: <20021010023701.GJ21391@hades.hell.gr>
References: <20021009.22451000.4017525480@rafter.> <20021010023701.GJ21391@hades.hell.gr>
X-Mailer: Mozilla/3.0 (compatible; StarOffice/5.2;Linux)
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<

On 10/10/02, 4:37:02 AM, Giorgos Keramidas <keramida@ceid.upatras.gr> wr=
ote=20
regarding Re: Security questions:

> > I've noticed that syslogd run as root, but why? Syslog just need to
> > connect to a port, get messages and write them to some files, so why=
 does
> > I have to be root? I know you have to be root to bind() to a port be=
low
> > 1024, but there should be a syslog user to lower UID to after it hav=
e
> > done that?!?!?

> One reason is to be able to bind to a lower port than 1024.

Jep, I also mentioned that.

> Another reason is obvious if you look at the owner and permissions of
> the system log files:

> giorgos@patata[05:33]/home/giorgos$ ls -ld /var/log/messages
> -rw-r--r--  1 root  wheel  620908 Oct 10 05:33 /var/log/messages

Yes, but they could be changed to user: syslog

br
socketd

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message