Bug 220539
| Summary: | RFE: run ddclient as a dedicated user | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ville Skyttä <ville.skytta> | ||||
| Component: | ddclient | Assignee: | Josh Boyer <jwboyer> | ||||
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | rawhide | CC: | thomas | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | 3.7.1-1 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2007-03-03 08:39:16 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Ville Skyttä
2006-12-21 23:03:59 UTC
(In reply to comment #0) > ddclient currently runs as root. I suppose it could be fairly easily be made to > run as a dedicated less privileged user? See eg. the ez-ipupdate package for > examples. Good idea. I'll take a look at this shortly after I get back from vacation Josh, if you feel like taking over this package, let me know (In reply to comment #2) > Josh, if you feel like taking over this package, let me know Erm... I thought we had already agreed on that? I took it right before FC-6 came out. I'll forward you the email I have. Created attachment 145768 [details]
specfile changes
Ok, I'm obviously missing something here. I've created the dedicated ddclient
user, but I'm missing how to actually start the program as that user. Help?
Try "daemon --user ddclient $exec ..." in the init script. By the way, it'll probably be necessary to do something about the PID file too (eg. move to /var/run/ddclient/ddclient.pid and use "daemon --pidfile ..." in the init script) - currently it's specified as pid=/var/run/ddclient.pid in the config file but /var/run is not writable for non-root users. Done in upcoming 3.7.1-1 |