Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-11 Thread Alex Zbyslaw
Matthew Seaman wrote: [EMAIL PROTECTED] wrote: On Wed, 06 Feb 2008, Alex Zbyslaw wrote Setuid/gid bits on shell scripts aren't considered safe, however and may even be disabled. THERE IS NO REASON FOR THIS, JUST USE THE FILE-SYSTEM TO PROTECT THE FILES (MAKE THEM NOT

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-10 Thread [EMAIL PROTECTED]
On Wed, 06 Feb 2008, Alex Zbyslaw wrote SNIP Setuid/gid bits on shell scripts aren't considered safe, however and may even be disabled. THERE IS NO REASON FOR THIS, JUST USE THE FILE-SYSTEM TO PROTECT THE FILES (MAKE THEM NOT WRITEABLE). Scripts are no more susceptible to

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-10 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 [EMAIL PROTECTED] wrote: On Wed, 06 Feb 2008, Alex Zbyslaw wrote SNIP Setuid/gid bits on shell scripts aren't considered safe, however and may even be disabled. THERE IS NO REASON FOR THIS, JUST USE THE FILE-SYSTEM TO

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-10 Thread Jonathan McKeown
On Sunday 10 February 2008 11:13, Matthew Seaman wrote: [EMAIL PROTECTED] wrote: On Wed, 06 Feb 2008, Alex Zbyslaw wrote SNIP Setuid/gid bits on shell scripts aren't considered safe, however and may even be disabled. THERE IS NO REASON FOR THIS, JUST USE THE

/usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Zbigniew Szalbot
Hello, I have looked at my /usr/local/etc/rc.d/ and realized that the symlink I put there has the root as owner. It all works but I would rather use a non-root user for to run that script. $ ls -l /usr/local/etc/rc.d/ lrwxr-xr-x 1 root wheel40 May 9 2007 sender.sh -

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Lowell Gilbert
Zbigniew Szalbot [EMAIL PROTECTED] writes: I have looked at my /usr/local/etc/rc.d/ and realized that the symlink I put there has the root as owner. It all works but I would rather use a non-root user for to run that script. $ ls -l /usr/local/etc/rc.d/ lrwxr-xr-x 1 root wheel40 May

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Alex Zbyslaw
Zbigniew Szalbot wrote: Hello, I have looked at my /usr/local/etc/rc.d/ and realized that the symlink I put there has the root as owner. It all works but I would rather use a non-root user for to run that script. $ ls -l /usr/local/etc/rc.d/ lrwxr-xr-x 1 root wheel40 May 9 2007

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Zbigniew Szalbot
Hello Alex, 2008/2/6, Alex Zbyslaw [EMAIL PROTECTED]: Zbigniew Szalbot wrote: Hello, I have looked at my /usr/local/etc/rc.d/ and realized that the symlink I put there has the root as owner. It all works but I would rather use a non-root user for to run that script. $ ls -l

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Alex Zbyslaw
Zbigniew Szalbot wrote: I have looked at my /usr/local/etc/rc.d/ and realized that the symlink I put there has the root as owner. It all works but I would rather use a non-root user for to run that script. $ ls -l /usr/local/etc/rc.d/ lrwxr-xr-x 1 root wheel40 May 9 2007 sender.sh -

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Zbigniew Szalbot
2008/2/6, Alex Zbyslaw [EMAIL PROTECTED]: Zbigniew Szalbot wrote: I have looked at my /usr/local/etc/rc.d/ and realized that the symlink I put there has the root as owner. It all works but I would rather use a non-root user for to run that script. $ ls -l /usr/local/etc/rc.d/ lrwxr-xr-x

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Alex Zbyslaw
Zbigniew Szalbot wrote: Thank you. I realized this was the case before I wrote previous message. The thing is the real file is owned by user api. However, when the application is started following a reboot, its logs are created by user root, whereas when I start it by hand as user api, its logs

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread Alex Zbyslaw
Zbigniew Szalbot wrote: I have never really understood the thing about setuids, gid and etc. :) I am not planning a restart so won't try it but I am pretty sure that logs are created by root unless the api is started manually. No big deal really but thanks for all the suggestions! It's very

Re: /usr/local/etc/rc.d/ scripts and non-root user

2008-02-06 Thread RW
On Wed, 06 Feb 2008 17:09:50 + Alex Zbyslaw [EMAIL PROTECTED] wrote: I personally much prefer scripts in rc.d because it's much easier to migrate than crontabs, and if I never use a crontab I always know where to look. It looks to me like you shouldn't be starting the demon as user api