[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Condor-users] condor cod
- Date: Wed, 14 Sep 2005 12:40:24 -0500
- From: Derek Wright <wright@xxxxxxxxxxx>
- Subject: Re: [Condor-users] condor cod
On Wed, 14 Sep 2005 12:37:30 -0500 Derek Wright wrote:
> otherwise, anyone who wants to could use cod to start a process as
> any user they want.
upon further reflection, it's not quite as bad as that. this is where
the "VALID_COD_USERS" setting comes into play. they can't start cod
jobs as anyone they want, but they could start them as any user listed
in VALID_COD_USERS... that's certainly better (but still a little
scary, if your site involves machines/users you can't trust).