Re: setuids() like setgroups() ?
Alexander Kjeldaas (astor@fast.no)
Fri, 16 Apr 1999 17:46:39 +0200
On Fri, Apr 16, 1999 at 01:21:05PM +0200, Miquel van Smoorenburg wrote:
> In article <cistron.19990416130729.A24353@lucifer.fast.no>,
> Alexander Kjeldaas <astor@fast.no> wrote:
> >I've probably said this many times before, but passing being able to
> >pass an UID from one process to another using IPC is more flexible
> >than the above.
>
> Yes, but if you have a lot of UIDs to switch between (for apache each
> request can potentially be for a different UID) it would mean
> a context switch for every request. I don't know ho much that would
> influence performance.
>
[ I forgot to CC this to the kernel-list ]
This looks like a design problem with Apache. It should probably keep
processes that have changed UID around for a while so that it doesn't
have to fork() for each request that requires Apache to change UID.
So _if_ the above latency issues really exists, they can probably be
dealt with.
astor
--
Alexander Kjeldaas, Fast Search & Transfer, Trondheim, Norway
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/