[Mono-aspnet-list] Impersonation for special pathes

Robert Jordan robertj at gmx.net
Fri Dec 3 06:48:40 EST 2010


On 02.12.2010 21:02, mabra at manfbraun.de wrote:
> Hi All !
>
> To allow some system near function, I need a prived user.
> With windows, I use imperonation in asp.net, defined
> in the 'web.conf', under special 'location' tags.
>
> Is this just the same way with mono/linux [so far
> I would currently not know any method to impersonate
> in code].

Mono does not support impersonation because it would be
pretty limiting and insecure under Unix.

Under Unix only root is permitted to impersonate. Since
Apache workers and thus mod-mono-server (the ASP.NET host) are
running under an unprivileged user account, impersonation
is simply impossible. Running Apache workers as root is not
recommended.

Robert



More information about the Mono-aspnet-list mailing list