[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: MBF (Re: correct use of su)



On 13 May 2014 15:44, Cameron Norman <camerontnorman@gmail.com> wrote:
I found another use of su that may need to be added to your list. rabbitmq (oddly) wraps itself up in a shell script, /usr/sbin/rabbitmq-server, which asserts the user is root or rabbitmq, and drops down to rabbitmq if it is root (using su), then starts the actual binary. The problem with this one is that it is upstream code and cannot use s-s-d for obvious reasons.

I would imagine that the init.d script just needs to be modified to use the -c option of start-stop-daemon, and that way /usr/sbin/rabbitmq-server will be called with the correct user and won't run su.

I assume that the init.d script could also call the actual binary directly.

Do wonder how many packages call su in this manner though.
--
Brian May <brian@microcomaustralia.com.au>

Reply to: