[Zope] Can't build resource file for PCGI on Zope 2.7b1

Chris Withers chrisw at nipltd.com
Wed Sep 3 14:24:16 EDT 2003


Tiller, Michael (M.M.) wrote:
> That isn't the point.  The point is that a (properly configured) named pipe *is* more secure than a port (even a localhost port) because the permissions can be controlled at the system level.  So it seems reasonable (to me) for somebody to want to use a named pipe.

I'd say you're in a minority there, though, which is never a good place to be 
with open source unless you're prepared to maintain whatever minority element it 
is that you're using.

> In any case, I'm not looking to get into an argument about how well-reasoned our corporate security policies.  I'm just trying to understand what the purported "more appropriate" alternatives are for PCGI.

Most people I know of use proxy pass or rewrite rules through Apache to Zope 
listening on a local port.

Chris




More information about the Zope mailing list