Bug 86271 – Create dedicated user and group in net-mail/freepops ebuild to make freepopsd drop root privileges

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Olivier Castan 2005-03-22 09:03:35 UTC]

freepopsd can be launched as a service in /etc/init.d. The command line supports the argument -s user.group to drop root privileges.

For example, that can be added to freepops ebuild (mimic hal ebuild) :
pkg_preinst() {

        enewgroup freepopsd || die "Problem adding freepopsd group"
        enewuser freepopsd -1 /bin/false /dev/null freepopsd || die "Problem adding freepopsd user"

}

Add to start() function in /etc/init.d/freepopsd :
        if  [ ${DAEMON_USER} ] && [ ${DAEMON_GROUP} ]; then
                ARGS="${ARGS} -s ${DAEMON_USER}.${DAEMON_GROUP}"
        fi

Add to /etc/conf.d/freepopsd :
# User and group to make freepopsd drop root privileges
DAEMON_USER="freepopsd"
DAEMON_GROUP="freepopsd"

Reproducible: Always
Steps to Reproduce:

[Comment 1 SpanKY 2005-04-16 00:19:40 UTC]

cant it just run as 'nobody' ?

[Comment 2 MickKi 2005-04-18 23:35:54 UTC]

Meanwhile, I run it as:

# freepopsd -s michael.users

[Comment 3 SpanKY 2005-04-19 15:13:50 UTC]

0.0.27-r1 has the default init script run under the nobody user