[news.software.nntp] Why run nntpd as root?

schnoebe@convex.com (Eric Schnoebelen) (11/06/90)

In the installation instructions in the file server/README, it is
recommended that nntpd be run by inetd as user root.  Is this really
required?  What would break if the news user was specified instead,
aka, the inetd.conf line would look like:

	nntp stream tcp nowait usenet /usr/etc/nntpd nntpd

Thank you for your support,
		Eric
--
Eric Schnoebelen		eric@cirr.com		schnoebe@convex.com
Bolub's Fourth Law of Computerdom:
    Project teams detest weekly progress reporting because it so
	    vividly manifests their lack of progress.

sob@tmc.edu (Stan Barber) (11/06/90)

superuser access is somtimes needed to read the disk superblock to calcalate
freespace (so nntp can reject xfers when the disk is too full) or to dig up
the load average (so nntp can reject connections because the system is too
busy). Your system may provide ways to get this information without running
as root. Serious work has been done to make it possible to run nntpd as
root with little worry of security problems.

If anyone has evidence to the contrary, please forward them to "nntp@tmc.edu"

Thanks
-- 
Stan           internet: sob@bcm.tmc.edu         Director, Networking 
Olan           uucp: {rutgers,mailrus}!bcm!sob   and Systems Support
Barber         Opinions expressed are only mine. Baylor College of Medicine

wswietse@svbs01.bs.win.tue.nl (Wietse Venema) (11/06/90)

schnoebe@convex.com (Eric Schnoebelen) writes:

:What would break if [...] the inetd.conf line would look like:  :
:       nntp stream tcp nowait usenet /usr/etc/nntpd nntpd

We have been running the nntpd that way for years, without any ill effects.