Re: ZTS - why are you using it?
| From: | Zeev Suraski | Date: | Tue, 29 Jan 2013 16:12:12 +0000 |
| Subject: | Re: ZTS - why are you using it? | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-65416@lists.php.net to get a copy of this message | ||
On 29 בינו 2013, at 17:45, "Ángel González" <keisial@gmail.com> wrote:
> On 29/01/13 15:21, Pierre Joye wrote:
>> On Tue, Jan 29, 2013 at 3:16 PM, Zeev Suraski <zeev@zend.com> wrote:
>>> On Windows with impersonation you're actually in a better situation than
>>> you are in Linux. You could hold a small pool of processes and handle as
>>> many different users as you'd like.
>> Works fine with ZTS too btw, IIS takes care about managing the
>> respective application pools.
>>
>> But yes, impersonation is a huge on Windows/IIS, get ride of
>> openbasedir and all that in one go (and again, not NTS specific).
>
> Wouldn't that be equivalent security-wise to running the server on linux
> as root for
> calling setuid() to each user?
No, because the process is reusable and can be switched to other creds.
Zeev