Path: utzoo!utgpu!watserv1!watmath!att!tut.cis.ohio-state.edu!cs.utexas.edu!yale!ox.com!b-tech!zeeff
From: zeeff@b-tech.ann-arbor.mi.us (Jon Zeeff)
Newsgroups: news.software.b
Subject: Re: (C News) limit filesize and inews
Message-ID: <$*N+7Z_@b-tech.uucp>
Date: 10 Jan 91 14:57:39 GMT
References: <1991Jan7.182907.13583@zoo.toronto.edu> <3480@gazette.bcm.tmc.edu> <663302894.24807@mindcraft.com>
Organization: Branch Technology
Lines: 12

>>Okey, WHAT IS THE SOLUTION THEN?
>
>Call relaynews and expire from a wrapper that runs with root's
>effective UID, uses ulimit() to set a usable file size, does setuid()
>and setgid() to the news user's ID, values, and execs its argument.

This is the correct solution (for security reasons too) and is exactly
what my rnews.c does.  As always, it's available via ftp from ais.org in
pub/cnews.speedups.Z.

-- 
Jon Zeeff (NIC handle JZ)	 zeeff@b-tech.ann-arbor.mi.us