Re: MBF (Re: correct use of su)

2014-05-13 Thread Bastien ROUCARIES
Le 13 mai 2014 17:42, "Russ Allbery" a écrit : > > > Le 13 mai 2014 03:01, "Michael Biebl" a =C3=A9crit : > >> Am 13.05.2014 02:54, schrieb Russ Allbery: > > >>> Yeah, that's just what I was thinking. Any software that doesn't > >>> honor an invoke-rc.d policy is RC-buggy anyway, and it would be

Re: MBF (Re: correct use of su)

2014-05-13 Thread Russ Allbery
> Le 13 mai 2014 03:01, "Michael Biebl" a =C3=A9crit : >> Am 13.05.2014 02:54, schrieb Russ Allbery: >>> Yeah, that's just what I was thinking. Any software that doesn't >>> honor an invoke-rc.d policy is RC-buggy anyway, and it would be good >>> to catch and fix that. > Could you also open a b

Re: MBF (Re: correct use of su)

2014-05-12 Thread Brian May
On 13 May 2014 16:15, Cameron Norman wrote: > It looks like it already does this. I assume the user running the command > manually would not hurt anything, correct? > I think the user running the command manually would have the same problems. Especially as it is a daemon. Is this is something D

Re: MBF (Re: correct use of su)

2014-05-12 Thread Cameron Norman
El Mon, 12 de May 2014 a las 10:53 PM, Brian May escribió: On 13 May 2014 15:44, Cameron Norman wrote: I found another use of su that may need to be added to your list. rabbitmq (oddly) wraps itself up in a shell script, /usr/sbin/rabbitmq-server, which asserts the user is root or rabbitmq,

Re: MBF (Re: correct use of su)

2014-05-12 Thread Bastien ROUCARIES
Le 13 mai 2014 03:01, "Michael Biebl" a écrit : > > Am 13.05.2014 02:54, schrieb Russ Allbery: > > Steve Langasek writes: > > > >> AFAIK, d-i disabling of s-s-d is a historical workaround for packages > >> not using invoke-rc.d (back in the days before it was a Policy "must"). > >> Maybe it's tim

Re: MBF (Re: correct use of su)

2014-05-12 Thread Brian May
On 13 May 2014 15:44, Cameron Norman wrote: > I found another use of su that may need to be added to your list. rabbitmq > (oddly) wraps itself up in a shell script, /usr/sbin/rabbitmq-server, which > asserts the user is root or rabbitmq, and drops down to rabbitmq if it is > root (using su), the

Re: MBF (Re: correct use of su)

2014-05-12 Thread Cameron Norman
El Mon, 12 de May 2014 a las 6:01 PM, Michael Biebl escribió: Am 13.05.2014 02:54, schrieb Russ Allbery: Steve Langasek writes: AFAIK, d-i disabling of s-s-d is a historical workaround for packages not using invoke-rc.d (back in the days before it was a Policy "must"). Maybe it's time

Re: MBF (Re: correct use of su)

2014-05-12 Thread Steve Langasek
On Tue, May 13, 2014 at 03:01:10AM +0200, Michael Biebl wrote: > Am 13.05.2014 02:54, schrieb Russ Allbery: > > Steve Langasek writes: > >> AFAIK, d-i disabling of s-s-d is a historical workaround for packages > >> not using invoke-rc.d (back in the days before it was a Policy "must"). > >> Maybe

MBF (Re: correct use of su)

2014-05-12 Thread Michael Biebl
Am 13.05.2014 02:54, schrieb Russ Allbery: > Steve Langasek writes: > >> AFAIK, d-i disabling of s-s-d is a historical workaround for packages >> not using invoke-rc.d (back in the days before it was a Policy "must"). >> Maybe it's time to drop this diversion of s-s-d? > > Yeah, that's just what