Ticket #378 (closed Patches: wontfix)

Opened 6 years ago

Last modified 5 years ago

Remove requrement for httpd to run as asterisk.

Reported by: qldrob Assigned to: nobody
Priority: minor Milestone:
Component: Web interface Version: CVS-HEAD
Keywords: Cc:
Confirmation: SVN Revision (if applicable):
Backend Engine: All Backend Engine Version:

Description (Last modified by gregmac) 

I've written a secure wrapper script that (hopefully)
will be reasonably sane about not letting bad people do
things as asterisk. If you setuid it root (or asterisk,
it won't mind) it'll only run files in
/var/lib/asterisk/bin.

Code is well documented. I'll see if I can put together
a patch to make all the system() calls use it.

Change History

01/26/06 00:35:29 changed by qldrob 

Logged In: YES 
user_id=943208

(This won't be easy, I've suddenly realised all the linking
of voicemail stuff needs to be done as asterisk too. I'll
probably re-write this to be a bit more intelligent.)

10/03/06 16:33:59 changed by gregmac

  • status changed from assigned to closed.
  • resolution changed from None to wontfix.
  • description changed.

Missing patch. This will likely be implemented once asterisk fixes the voicemail ownership issue.