[asterisk-users] Asterisk Server Down

broadbandvoice at comcast.net broadbandvoice at comcast.net
Sun Sep 17 13:10:22 MST 2006


Thanks everyone it is working now.

-------------- Original message -------------- 
From: Tzafrir Cohen <tzafrir.cohen at xorcom.com> 

> On Sun, Sep 17, 2006 at 10:40:16AM -0400, Steve Totaro wrote: 
> 
> > >you're right, one should proof, under which user asterisk runs... 
> > >Besides security reasons, running asterisk as root, doesn't it allow a 
> > >higher prioritization of asterisk processes? 
> 
> This is why we let asterisk setuid itself to user asterisk, and don't 
> let the wrappr script handle that. Asterisk sets scheduling priority 
> before running setuid/setgid . 
> 
> > I can see a problem with security issues but is it a bad thing to allow 
> > higher priority of the asterisk process? Not sure that it does anyways, 
> > but I don't see how that is a bad thing? 
> 
> It can help the quality of Audio. On the downside, it means that a 100% 
> CPU loop in asterisk is a pain to recover from. Security implications: 
> if someone can inject you one line to the dialpan, they can (under the 
> right circumstances) get your system stuck very badly . Unless you have 
> a manager connection availble. 
> 
> -- 
> Tzafrir Cohen sip:tzafrir at local.xorcom.com 
> icq#16849755 iax:tzafrir at local.xorcom.com 
> +972-50-7952406 jabber:tzafrir at jabber.org 
> tzafrir.cohen at xorcom.com http://www.xorcom.com 
> _______________________________________________ 
> --Bandwidth and Colocation provided by Easynews.com -- 
> 
> asterisk-users mailing list 
> To UNSUBSCRIBE or update options visit: 
> http://lists.digium.com/mailman/listinfo/asterisk-users 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20060917/f915d4c3/attachment.htm


More information about the asterisk-users mailing list