Re: flex license manager tempfile predictable name...

From: Edwards Philip M Contr AFRL/SNRR (Philip.Edwardsat_private)
Date: Thu Feb 24 2000 - 08:23:31 PST

Next message: Dawes, Rogan (ZA - JNB): "Re: {\rtf\a112911112911112911112911...112911} in the body will cr"

Previous message: Charles Skoglund: "Re: Wordpad vulnerability, exploitable also in IE for Win9x"
Maybe in reply to: sp00n: "flex license manager tempfile predictable name..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Roelof JT Jonkman <rjonkmanat_private> wrote:

> Flex does not need to run as root:
>
> Somewhere on their webpage they have some scripts, I crafted
> some myself, and
> didn't see a need to run a license manager as root.

We use software that comes with FlexLM, and their[*] documentation states
that lmgrd should specifically /not/ be run as root.  Some of the wrapper
scripts shipped with the software perform a UID check and bail out if root
is running the script.

All of the license manager startup scripts do a "su <foo> -c startupcommand"
where <foo> is some mortal user with few abilities.

Phil
[*] The vendor/third-party software itself.

--
Phil Edwards  <philip.edwardsat_private>
Senior Unix Sysadmin AFRL/SNRR
Wright-Patterson AFB

Next message: Dawes, Rogan (ZA - JNB): "Re: {\rtf\a112911112911112911112911...112911} in the body will cr"
Previous message: Charles Skoglund: "Re: Wordpad vulnerability, exploitable also in IE for Win9x"
Maybe in reply to: sp00n: "flex license manager tempfile predictable name..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:37:04 PDT