[OpenSIPS-Users] Security related

[John Nash]

I have couple of things i need your valuable inputs I have already seen
some articles and slides but some questions remain...

1- AVP db queries do we need to escape parameters or its taken care of by
module internally.

2- How can I secure opensipsctl and mi_datagram as that is gateway to my
opensips.

3- I need to use exec module to run some opensipsctl commands, If I
understand correctly, if i am running opensips as root someone can run any
command on my box?...On the other hand if I run opensips on some non
privileged user can I still run exec?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20151123/de0407c1/attachment.htm>