Re: [Condor-users] condor cod

[Derek Wright <wright@xxxxxxxxxxx>]

On Wed, 14 Sep 2005 12:37:30 -0500  Derek Wright wrote:

> otherwise, anyone who wants to could use cod to start a process as
> any user they want.

upon further reflection, it's not quite as bad as that.  this is where
the "VALID_COD_USERS" setting comes into play.  they can't start cod
jobs as anyone they want, but they could start them as any user listed
in VALID_COD_USERS...  that's certainly better (but still a little
scary, if your site involves machines/users you can't trust).

-derek