zooko <[EMAIL PROTECTED]> writes:
> I have an idea as to how you can prevent buildbot from popping up
> Windows into your workspace. The idea is create a different user
> account just for buildbot and run buildbot in there.
>
> This will also have the pleasant side-effect of making it impossible
> for buildbot scripts to accidentally or maliciously read or delete
> your private files in your user account.
>
> There is a trick to it, though. On Mac OS X if you start a process
> like buildbot running and then log out of the user account that owns
> the process, that process loses the ability to do DNS queries! There
> is a tool in Mac OS X to manage such things, called "launchd". Here
> is a tutorial on how to use that tool for buildbot:
>
> http://buildbot.net/trac/wiki/UsingLaunchd
>
> But I simply leave the buildbot user logged in. :-)
Can't you just do something like this?
sudo -u nobody buildbot
That's the usual technique (modulo sudo) that daemons use to relinquish
their (super)user privileges.
_______________________________________________
darcs-users mailing list
[email protected]
http://lists.osuosl.org/mailman/listinfo/darcs-users
