[hunchentoot-devel] Re: setuid/setgid

[Edi Weitz]

On Fri, 24 Nov 2006 11:28:27 -0800, Jeffrey Cunningham <jeffrey at cunningham.net> wrote:

> I think maybe I figured it out. I should start the server from lisp
> running as root, but using setuid and setgid values for a
> non-privileged user. I was looking at your code and it appears you
> switch them after the server has started.
>
> One of the things I really like about your server is the ability to
> hack the handler code on the fly while the server is
> operating. Wouldn't this be a little dangerous if I have to run from
> lisp as root?

[Please use the mailing list.]

Once you've called START-SERVER with setuid/setgid, you're no longer
root, so to say.