Bug 347695 – sys-apps/openrc: stop-start-daemon should have an option to open session for a user without dropping privs

• Status: CONFIRMED
• Product: Gentoo Hosted Projects

[Description Diego Elio Pettenò (RETIRED) 2010-12-04 03:46:36 UTC]

Basically we need a way to make sure that we respect limits for an arbitrary user, such as apache2, without dropping privs from root.

[Comment 1 SpanKY 2010-12-04 10:48:07 UTC]

what are you talking about exactly ?  s-s-d ?  please provide some real details.

[Comment 2 William Hubbs 2010-12-04 16:45:07 UTC]

(In reply to comment #1)
> what are you talking about exactly ?  s-s-d ?  please provide some real
> details.

I spoke with Diego on irc about this, and yes, he is talking about s-s-d.  We need a way for s-s-d to respect the limits of a user but not drop privs. Theis is his blog post on the issue. [1]

[1] http://blog.flameeyes.eu/2010/10/02/service-limits

[Comment 3 SpanKY 2010-12-04 21:29:54 UTC]

i'm not going to dig through an external site to figure out what a reporter is trying to say.  simply summarize the details in the bug just like we've always required of posters.

[Comment 4 William Hubbs 2015-10-16 16:37:18 UTC]

I see that the code in start-stop-daemon has changed since this bug was
open. Particularly we don't refer to the user "nobody" any longer.

Is this bug still an issue?