Am 15.07.2017 um 00:07 schrieb Don Armstrong: > This plugin is horribly designed, and runs su - $DBUSER -c [...] for its > functioning. Indeed. > It should instead just su $DBUSER -c [...]; or better yet, not actually > su to the database user, and instead run as a user which only has the > ability to read the appropriate tables and cannot also write to. There is an alternative utility called runuser which is more suitable for such cases. It uses a different pam config and doesn't start a systemd logind session. -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
Attachment:
signature.asc
Description: OpenPGP digital signature