Re: Running as nobody

["kyle@invisio.com" <kyle@invisio.com>]

At 12:37 30/08/99 -0500, you wrote: 
>At 06:00 PM 8/30/99 +0200, you wrote: 
>>Hi Kyle, 
>> 
>>At 22:53 29/08/99 -0500, you wrote: 
>>>****** message to minivend-users from "kyle@invisio.com" 
>><kyle@invisio.com> ****** 
>>>Does the above statement mean that running as nobody 
>>>could have some security issues if the web server is 
>>>also running as nobody? Or does it mean something 
>>>won't work correctly but not necessarily a security 
>>>problem? 
>> 
>> 
>>Did you get any replies on this? I have a user=nobody problem in Mvend 3.14 
>>- not a problem so much, but I read the same bit of the manual you did 
>>which effectively says NEVER run as user=nobody. 
>> 
>>Each user session ID I have seen says user=nobody. I couldn't find out why 
>>this should be a problem, MVend runs just fine (http://net-lets.com only 
>>opened this morning). I would be very interested in any replies you get on 
>>the matter - can you keep me in touch? 
>> 
>>Many thanks, 
>> 
>>All the best, 
>> 
>>Tom.. 
> 
>Sure, if I get any replies, I'll let you know. 
>As far as the session ID user, that is not related to minivend running as 
user 
>nobody. I have a minivend system that is running as user minivend and it also 
>has all session users listed as nobody, I believe the term nobody here is in 
>relation to how you have the setting concerning tracking customers set IE: 
> 
>DomainTail No 
>IpHead Yes 
>IpQuad 0 
> 
>and other settings. 
> 
>I believe if you use more restrictive settings, that user will become 
something 
>else (combination of ip/host/browser agent maybe?) 
> 
>Would you mind if I posted, or you posted this email to the user list? 
> 
>Latter, 
>Kyle

<snip from private email>
Hi Kyle,
[post this to the list by all means]

Thanks,
Tom..
<end snip>

We are still looking for the answer why minivend should NOT be run as
user nobody?

Thanks,
KC (Kyle Cook)



http://www.invisio.com 
Web site design, database driven sites,
and shopping cart programming. 
Great sites, value priced!