[Mldonkey-bugs] [bug #20613] Include run_as_group in options

[bachtiar]

Follow-up Comment #2, bug #20613 (project mldonkey):

Actually I was referring to a similar, but different problem.

The topic you mentioned is about adding secondary groups to mldonkey user. I
am not trying to do that. I want to add other users to mldonkey group. By
doing this, I would like to give other users access to files that mldonkey
downloads.

Imagine you want to chroot mlnet process for security. Because only root has
permission to use chroot, you must do it as root. So, mlnet starts as
root:root, and later changes (via built-in code) to mldonkey:root. So even if
I have set the primary group for mldonkey as mldonkey, it does not help,
because mlnet still ends up running as mldonkey:root. Consequentially,
downloaded files are also owned by mldonkey:root. This means that my user
(e.g. john:mldonkey) is unable to read/write files unless:
(a) he in group "root"
(b) files are "o+rwx", or
(c) "su" command is used inside chroot

None of those two options is desirable, because they all pose a security
risk, making chroot useless.

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?20613>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/