Thread (4 messages) 4 messages, 3 authors, 2007-07-03

Re: Behavior of mdadm depending on user

From: Ian Dall <hidden>
Date: 2007-07-03 12:40:29

On Mon, 2007-07-02 at 21:10 -0500, Michael Schwarz wrote:
This ia just a couple of quick questions.

I'm charged with developing a prototype application that will assemble and
mount a hot-swapped drive array, mount it, transfer files to it, unmount it,
and stop the array. And it is an application delivered by a local webserver
(don't ask).

I don't want to do any of the incredibly stupid acts of making madadm and
mount/umount setuid root, nor do I want to run the webserver as root.

Instead, I took the slightly less stupid approach of invoking madadm and
mount/umount with a hardcoded C application that is setuid root. (We can
debate the stupidity of this -- I know it isn't best, but it is fast and less
stupid than the alternatives presented above).
This isn't really an answer to your question, but isn't this an ideal
application for sudo? Make a shell script with the mdadm command(s) you
want. And set it up so apache or whatever your web server runs as able
to run your shell script as root without authentication. 

Ian
-- 
Ian Dall [off-list ref]
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help