Re: How to launch squid

David Richards <dj.richards@qut.edu.au> writes:
> Try the following: chown -R squid.squidgrp /usr/local/squid

It's actually only the cache and logs subdirectories, with everything
in and under them, that need to be writable by the squid effective
user.

I've been playing with a RunCache-replacement I wrote that puts squid in
a chroot-jail in /usr/local/squid and starts squid itself as the
unpriviledged squid user rather than as root; various bits of operating
system need to get copied to places like /usr/local/squid/etc and
/usr/local/squid/lib and it gets a bit hairy and system-dependent. It's
not allowed to modify its own binaries or config files in the bin and etc
subdirectories. IMHO this is the way to go if you might be thinking
about running squid as a firewall proxy.

-- 
Anthony DeBoer <adb@geac.com>                    #include <std.disclaimer>
(note: <adb@onramp.ca> after the end of this month)