[Asterisk-Dev] edit zaptel.conf as non-root

[Moises Silva]

Hi Tzafrir. Im doing exactly that, not sure if its the best or most
secure way, but i've created a new group called, lets say 'myconfig',
and i made apache user member of this group. Then i just changed the
permissions to zaptel.conf to chmod 775, chown root:myconfig. So now i
can change from my GUI stuff in the file, like updating or adding
interfaces.

Hopefully someone can tell us if its secure or not, i think it is, but
im not expert at all :P

Best Regards.

- Moy

On Apr 2, 2005 6:28 PM, Tzafrir Cohen <tzafrir.cohen at xorcom.com> wrote:
> Hi
> 
> If I were to allow a non-root user that already has write-access to
> Asterisk's config to edit zaptel.conf, would that allow that user to
> gain extra priviliges?
> 
> I have a feeling it can, but can't point to anything specific.
> 
> The reason for asking this is to allow an Asterisk config interface to
> do such an action without giving it root.
> 
> --
> Tzafrir Cohen     icq#16849755  +972-50-7952406
> tzafrir.cohen at xorcom.com  http://www.xorcom.com
> _______________________________________________
> Asterisk-Dev mailing list
> Asterisk-Dev at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-dev
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>