[Asterisk-Users] Vmail.cgi Bahhh!!

[Michael Loftis]

--On Wednesday, October 20, 2004 09:21 -0500 niles at atheos.net wrote:


> If someone else doesn't give a better solution, you can try this.

Don't run * as root.  chown /dev/zap to say asterisk and run asterisk as 
that user.  Make sure the ASTVARLIB (/var/lib/asterisk) and spool dirs are 
all owned by that user as well.

asterisk has no good/practical reasons for running as root unless you want 
to bind TCP or UDP ports below 1024.