Erni v0.50.0: replace "su -c" for your daemon accounts
From: QM (qm100_at_brandxdev.net)
Date: 06/10/04
- Previous message: Guardian Digital: "Guardian Digital Launched Next Generation Secure Mail Suite"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: 10 Jun 2004 15:45:21 GMT
Erni v0.50.0 is available for download at :
Download formats include:
- C source code (tar.gz)
- RPM (built under Fedora Core 1, i386)
- Solaris PKG (Solaris 8 Sparc, Solaris 9 x86)
NEW FEATURES:
- Erni can now fork() the specified command to run it as a daemon,
and compensate for init scripts that hog the startup terminal
or console.
- Erni 0.50.0 uses a new trace subsystem.
PRODUCT DESCRIPTION:
Unix-like operating systems often use "daemon" or placeholder
accounts to run services (e.g. httpd or database). While it is
possible to lock the passwords for these accounts, often the
login shell must be valid such that the service may be started
using the ever-familiar
su - {daemon account} -c {start script}
which is typically called from system boot scripts.
For these daemon accounts to have a valid login shell, though,
makes them more susceptible to abuse.
Erni is a tool which permits systems administrators to bypass the
messy call to "su" by using system-level functions to safely assume
the identity of the daemon account.
Erni can be used to kick off daemon processes or run interactive
commands (such as a database query tool) as the target user.
Use of Erni removes one avenue through which your system's
daemon accounts may be misused: it enforces these accounts'
purpose as placeholders that own files and processes, and are
not meant for interactive use.
AVAILABILITY:
Erni is written in C and uses standard system calls. It should
therefore compile under most modern Unix-like operating systems.
Binary installer packages are available for RPM-based Linux
distributions and Sun Solaris.
WHERE TO DOWNLOAD:
Erni, and other quality BrandXDev software titles, may be downloaded
from the BrandXDev website at:
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION. #
# This group is archived at http://stump.algebra.com/~cola/ #
##########################################################################
- Previous message: Guardian Digital: "Guardian Digital Launched Next Generation Secure Mail Suite"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
