Hacker News Reader

Comment by julien421 | Hacker News Reader

Hello!

This website is a proof of concept with a simple Memcached SaaS. It is my final project for cs50x that ended this sunday. Please tell me what you think :)

+ You can read the how-to on SlideShare: http://www.slideshare.net/julienbarbier42/building-a-saas-us...

+ You can see the source on GitHub: https://github.com/jbarbier/SaaS_Memcached

View on HN

Fun little project. Well done.

Giving a public facing application sudo powers (even limited ones) is a little scarey. If I understood your documentation I believe if I somehow got onto your box I could escalate to root just by editing your iptables scripts. You probably want to ensure www-data (or anyone) cannot write to these files :-)

ouch! thank you! :) let's -w!

Here's a nice comment on some of the dangers of setuid/sudo on shell scripts. The more you know...

http://unix.stackexchange.com/questions/364/allow-setuid-on-...

Thank you Chris. So a better way would be a compile an executable instead of using a shell script?

Or run the webapp itself inside a docker container? :)

What has been your experience with docker? I've been meaning to check it out but did not get around to it yet.

Hey! I've been playing with docker for a few weeks now for this project. I started working on my project using LXC & AUFS, but then switched to Docker when it was released. Frankly it made my life much easier because getting LXC and AUFS to do what you want can be pretty hardcore.

Consider trying LVM2 snapshots instead of AUFS.

Great work Julien, keep it up :)

Reply on news.ycombinator.com