[ZODB-Dev] Daemon manager design issues
akuchlin@mems-exchange.org
akuchlin@mems-exchange.org
Sat, 9 Nov 2002 16:08:02 -0500
On Sat, Nov 09, 2002 at 02:38:15PM -0500, Guido van Rossum wrote:
>Why? I know you mean this as a security measure, but I'm unclear why
>the pid file would be any more vulnerable than, say, the Data.fs, or
>any other file written by any of these tools. What's the specific
>attack scenario you're thinking about?
Perhaps simple vandalism? Symlink zeod.pid to your Data.fs and the server
may overwrite it on starting up.
BTW, you may want to look at Dan Bernstein's daemontools for ideas;
they provide a framework for starting and stopping daemon processes.
(You might even consider using daemontools, but like Bernstein's other
tools the directory organization is a bit eccentric and the license
may be a problem.) See http://cr.yp.to/daemontools.html .
--amk