Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[dsdp-tm-dev] Dstore to use privileged ports for serverPortRange

Title: Dstore to use privileged ports for serverPortRange

We are interested in modifying Dstore to allow the serverPortRange to use privileged ports (<1024).  I had posted a newsgroup question about this and now were looking at how we could make changes for this.

We were first looking at starting the org.eclipse.dstore.core.server.Server method as root and then calling the native Unix setuid to change the effective user ID to that of the client.  But after thinking more about it, there is the possibility that the user could execute something that would setuid the process back to root and then they would have authority on the remote system they should not have.

So now we are looking at possibly splitting the server functionality into separate processes, one that runs as root and communicates over the network and one that runs as the client user ID and does all the real work on the remote system.  The 2 processes would have to communicate data between them.  Ive been looking over the Dstore source code to see how easy that separation might be. 

Does this solution sound reasonable?  Is there another, possibly better solution we havent thought of?

Any suggestions or things we should consider while tackling this are appreciated.  Wed like to work this out so that we could contribute our changes back.


Denise Schmidt

Back to the top