ddclient currently runs as root. I suppose it could be fairly easily be made to run as a dedicated less privileged user? See eg. the ez-ipupdate package for examples.
(In reply to comment #0) > ddclient currently runs as root. I suppose it could be fairly easily be made to > run as a dedicated less privileged user? See eg. the ez-ipupdate package for > examples. Good idea. I'll take a look at this shortly after I get back from vacation
Josh, if you feel like taking over this package, let me know
(In reply to comment #2) > Josh, if you feel like taking over this package, let me know Erm... I thought we had already agreed on that? I took it right before FC-6 came out. I'll forward you the email I have.
Created attachment 145768 [details] specfile changes Ok, I'm obviously missing something here. I've created the dedicated ddclient user, but I'm missing how to actually start the program as that user. Help?
Try "daemon --user ddclient $exec ..." in the init script. By the way, it'll probably be necessary to do something about the PID file too (eg. move to /var/run/ddclient/ddclient.pid and use "daemon --pidfile ..." in the init script) - currently it's specified as pid=/var/run/ddclient.pid in the config file but /var/run is not writable for non-root users.
Done in upcoming 3.7.1-1