[4504] in linux-announce channel archive
Linux-Announce Digest #796
daemon@ATHENA.MIT.EDU (Digestifier)
Thu Jun 10 18:13:07 2004
From: Digestifier <Linux-Announce-Request@senator-bedfellow.mit.edu>
To: Linux-Announce@senator-bedfellow.mit.edu
Reply-To: Linux-Announce@senator-bedfellow.mit.edu
Date: Thu, 10 Jun 2004 18:13:03 EDT
Linux-Announce Digest #796, Volume #4 Thu, 10 Jun 2004 18:13:03 EDT
Contents:
Erni v0.50.0: replace "su -c" for your daemon accounts (QM)
----------------------------------------------------------------------------
From: QM <qm100@brandxdev.net>
Subject: Erni v0.50.0: replace "su -c" for your daemon accounts
Date: 10 Jun 2004 15:45:21 GMT
Erni v0.50.0 is available for download at :
http://www.BrandXDev.net/
Download formats include:
- C source code (tar.gz)
- RPM (built under Fedora Core 1, i386)
- Solaris PKG (Solaris 8 Sparc, Solaris 9 x86)
NEW FEATURES:
- Erni can now fork() the specified command to run it as a daemon,
and compensate for init scripts that hog the startup terminal
or console.
- Erni 0.50.0 uses a new trace subsystem.
PRODUCT DESCRIPTION:
Unix-like operating systems often use "daemon" or placeholder
accounts to run services (e.g. httpd or database). While it is
possible to lock the passwords for these accounts, often the
login shell must be valid such that the service may be started
using the ever-familiar
su - {daemon account} -c {start script}
which is typically called from system boot scripts.
For these daemon accounts to have a valid login shell, though,
makes them more susceptible to abuse.
Erni is a tool which permits systems administrators to bypass the
messy call to "su" by using system-level functions to safely assume
the identity of the daemon account.
Erni can be used to kick off daemon processes or run interactive
commands (such as a database query tool) as the target user.
Use of Erni removes one avenue through which your system's
daemon accounts may be misused: it enforces these accounts'
purpose as placeholders that own files and processes, and are
not meant for interactive use.
AVAILABILITY:
Erni is written in C and uses standard system calls. It should
therefore compile under most modern Unix-like operating systems.
Binary installer packages are available for RPM-based Linux
distributions and Sun Solaris.
WHERE TO DOWNLOAD:
Erni, and other quality BrandXDev software titles, may be downloaded
from the BrandXDev website at:
http://www.BrandXDev.net/
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION. #
# This group is archived at http://stump.algebra.com/~cola/ #
##########################################################################
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: Linux-Announce-Request@NEWS-DIGESTS.MIT.EDU
You can submit announcements to be moderated via:
Internet: linux-announce@NEWS.ORNL.GOV
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Announce Digest
******************************
