Red Hat Bugzilla – Bug 45305
RFE: arpwatch to default to dropping root
Last modified: 2008-05-01 11:38:00 EDT
Default /etc/sysconfig/arpwatch should be created, which would cause
relinquish root privileges when run in the default installation.
'arpwatch' or something more generic, like 'tcpdump' or 'pcap' uid/gid
reserved for this (tcpdump, when used for monitoring can also drop privs,
created default /etc/sysconfig/arpwatch with OPTIONS="-u daemon"
Please note that /var/arpwatch must also be made owned by the same uid, and (at
files there too.