Re: [squid-users] Reconfiguration by a non-root user

On Friday 15 August 2003 04.24, aqil wrote:

> Binary or copy of kill setuserid ?
> Could you explain further ?

As already mentioned by another user in this thread sudo is a much
better alternative.

To make a setuserid squid copy of kill you do

  cp /bin/kill /home/operator/bin/kill-squid
  chown squid /home/operator/bin/kill-squid
  chmod u+s /home/operator/bin/kill-squid
  chmod og= /home/operator/bin/

This gives a program which "operator" can use to send signals to
processes with the privilege of the "squid" user thus allowing him to
reconfigure Squid by running "bin/kill-squid -HUP pidofsquid". If
your cache_effective_user is not "squid" then substitute "squid" with
your cache_efffective_user in the chown line above..

Regards
Henrik
Received on Thu Aug 14 2003 - 23:44:54 MDT