michael at stroeder.com
Wed May 24 02:40:01 EDT 2000
Kent Polk wrote:
> On Tue, 23 May 2000 09:10:38 +0200, Michael Ströder wrote:
> >Kent Polk wrote:
> >> What would be a suggested method to allow outgoing port 20
> >> connections
> >> from a Python setuid'd server such as Medusa?
> >Isn't it possible to bind to the privileged port 20 and do a setuid
> If you use connect, since it doesn't create a new socket, but you
> could use it for only one connection as the first one would have
> to be closed to terminate the connection. I think...
1. I'm very new to the socket programming stuff.
2. I only had a very brief look at Medusa.
In one of my projects I'm using the SocketServer.ThreadingMixIn to
drive a multi-threaded HTTP server. For binding to a privileged port
my naive approach was to do all the initialization stuff as root and
do a setuid(wwwrun) just before calling method serve_forever() of
the server class. Works just fine.
Does anybody see any security problems with that approach?
Can someone explain to me how different Medusa handles this
More information about the Python-list