[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: daemon user naming scheme



On Fri, 5 Sep 2014, Ian Jackson wrote:

> Simon McVittie writes ("Re: daemon user naming scheme"):
> > It is reasonable to use /var/lib/foo (or /run/foo or /var/cache/foo or
> > /var/games/foo) as the home directory of a system user whose name is
> > _foo, debian-foo, Debian-foo or whatever.
> 
> You need to be careful that the directory chosen never has undesirable
> permissions, since there are many ways that access can be granted to a
> user foo by putting things in ~foo.

You could use /nonexistent as dæmon user home directory,
but only if pam_mkhomedir gets patched to never create it…

bye,
//mirabilos
-- 
15:41⎜<Lo-lan-do:#fusionforge> Somebody write a testsuite for helloworld :-)


Reply to: