On 29 בינו 2013, at 17:45, "Ángel González" <[email protected]> wrote:
> On 29/01/13 15:21, Pierre Joye wrote:
>> On Tue, Jan 29, 2013 at 3:16 PM, Zeev Suraski <[email protected]> wrote:
>>> On Windows with impersonation you're actually in a better situation than
>>> you are in Linux. You could hold a small pool of processes and handle as
>>> many different users as you'd like.
>> Works fine with ZTS too btw, IIS takes care about managing the
>> respective application pools.
>>
>> But yes, impersonation is a huge on Windows/IIS, get ride of
>> openbasedir and all that in one go (and again, not NTS specific).
>
> Wouldn't that be equivalent security-wise to running the server on linux
> as root for
> calling setuid() to each user?
No, because the process is reusable and can be switched to other creds.
Zeev