[asterisk-users] Asterisk Server Down
broadbandvoice at comcast.net
broadbandvoice at comcast.net
Sun Sep 17 13:10:22 MST 2006
Thanks everyone it is working now.
-------------- Original message --------------
From: Tzafrir Cohen <tzafrir.cohen at xorcom.com>
> On Sun, Sep 17, 2006 at 10:40:16AM -0400, Steve Totaro wrote:
>
> > >you're right, one should proof, under which user asterisk runs...
> > >Besides security reasons, running asterisk as root, doesn't it allow a
> > >higher prioritization of asterisk processes?
>
> This is why we let asterisk setuid itself to user asterisk, and don't
> let the wrappr script handle that. Asterisk sets scheduling priority
> before running setuid/setgid .
>
> > I can see a problem with security issues but is it a bad thing to allow
> > higher priority of the asterisk process? Not sure that it does anyways,
> > but I don't see how that is a bad thing?
>
> It can help the quality of Audio. On the downside, it means that a 100%
> CPU loop in asterisk is a pain to recover from. Security implications:
> if someone can inject you one line to the dialpan, they can (under the
> right circumstances) get your system stuck very badly . Unless you have
> a manager connection availble.
>
> --
> Tzafrir Cohen sip:tzafrir at local.xorcom.com
> icq#16849755 iax:tzafrir at local.xorcom.com
> +972-50-7952406 jabber:tzafrir at jabber.org
> tzafrir.cohen at xorcom.com http://www.xorcom.com
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
> http://lists.digium.com/mailman/listinfo/asterisk-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20060917/f915d4c3/attachment.htm
More information about the asterisk-users
mailing list