Re: QA fallout

[fche@xxxxxxxxxx (Frank Ch. Eigler)]

Nathan Scott <nathans@xxxxxxxxxx> writes:

> [...]
>> Why no local changes by default?  at first blush I'd expect
>>      allow localhost : all;
>> like pmcd.conf.
>> 
> I was a bit concerned with anyone having a local login being able to
> effectively prevent the default logger from logging - that seems like
> it needs to be blocked?  [...]

Agreed.  Random local users should not be granted control/modification
type privileges on a system service by default.  If the
pmlc<->pmlogger channel could be secured with the newfangled
authentication, that'd be enough for e.g. uid=pcp or uid=root or
gid=pcp to be allowed by default.  Or change the pmlc<->pmlogger link
to AF_UNIX, and then limit it via equivalent filesystem permissions.

- FChE