Bug 347695

Summary:	sys-apps/openrc: stop-start-daemon should have an option to open session for a user without dropping privs
Product:	Gentoo Hosted Projects	Reporter:	Diego Elio Pettenò (RETIRED) <flameeyes>
Component:	OpenRC	Assignee:	OpenRC Team <openrc>
Status:	CONFIRMED ---
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://blog.flameeyes.eu/2010/10/02/service-limits
Whiteboard:
Package list:		Runtime testing required:	---

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2010-12-04 03:46:36 UTC

Basically we need a way to make sure that we respect limits for an arbitrary user, such as apache2, without dropping privs from root.

Comment 1 SpanKY gentoo-dev

2010-12-04 10:48:07 UTC

what are you talking about exactly ?  s-s-d ?  please provide some real details.

Comment 2 William Hubbs gentoo-dev

2010-12-04 16:45:07 UTC

(In reply to comment #1)
> what are you talking about exactly ?  s-s-d ?  please provide some real
> details.

I spoke with Diego on irc about this, and yes, he is talking about s-s-d.  We need a way for s-s-d to respect the limits of a user but not drop privs. Theis is his blog post on the issue. [1]

[1] http://blog.flameeyes.eu/2010/10/02/service-limits

Comment 3 SpanKY gentoo-dev

2010-12-04 21:29:54 UTC

i'm not going to dig through an external site to figure out what a reporter is trying to say.  simply summarize the details in the bug just like we've always required of posters.

Comment 4 William Hubbs gentoo-dev

2015-10-16 16:37:18 UTC

I see that the code in start-stop-daemon has changed since this bug was
open. Particularly we don't refer to the user "nobody" any longer.

Is this bug still an issue?