From owner-freebsd-isp@FreeBSD.ORG Mon Jul 25 20:06:31 2005 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2CBD916A41F for ; Mon, 25 Jul 2005 20:06:31 +0000 (GMT) (envelope-from freebsd-isp@chef-ingenieur.de) Received: from mta.webmatic.de (mta.webmatic.de [212.78.99.126]) by mx1.FreeBSD.org (Postfix) with ESMTP id 514D343D46 for ; Mon, 25 Jul 2005 20:06:29 +0000 (GMT) (envelope-from freebsd-isp@chef-ingenieur.de) Received: (qmail 45841 invoked by uid 1003); 25 Jul 2005 20:06:24 -0000 Received: from freebsd-isp@chef-ingenieur.de by mta.webmatic.de by uid 89 with qmail-scanner-1.22 (spamassassin: 2.63. Clear:RC:1(217.186.8.102):. Processed in 0.057281 secs); 25 Jul 2005 20:06:24 -0000 Received: from unknown (HELO ?172.21.1.12?) (freebsd-stable@chef-ingenieur.de@217.186.8.102) by mta.webmatic.de with (DHE-RSA-AES256-SHA encrypted) SMTP; 25 Jul 2005 20:06:24 -0000 Message-ID: <42E54654.1090705@chef-ingenieur.de> Date: Mon, 25 Jul 2005 22:06:44 +0200 From: Thomas Krause User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: de-DE, de, en-us, en MIME-Version: 1.0 To: freebsd-isp@freebsd.org Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit Subject: preventing a user to start a process X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jul 2005 20:06:31 -0000 Hello, is it possible to bar a user (www) from starting a process? I've a irc daemon running under the uid www. I think this was done by php. What would be the best way to prevent this (php should be remain usable)? I've installed ipfw rules, but this doesn't prevent the starting of the process. Kind regards, Thomas.