Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Jun 2006 23:02:06 GMT
From:      Luca Lesinigo <luckyluke@softhome.net>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/99190: [rc.d & mac_portacl] Add ability in rc.d scripts to start daemons as non-root
Message-ID:  <200606192302.k5JN26mV004373@www.freebsd.org>
Resent-Message-ID: <200606192310.k5JNAHPu010532@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         99190
>Category:       ports
>Synopsis:       [rc.d & mac_portacl] Add ability in rc.d scripts to start daemons as non-root
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jun 19 23:10:16 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Luca Lesinigo
>Release:        6.1-RELEASE-p2
>Organization:
LM Networks S.r.l.
>Environment:
FreeBSD 6.1-RELEASE-p2 #0: Fri Jun 16 16:35:24 CEST 2006
>Description:
As the documentation says, http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac-portacl.html, mac_portacl(4) can be used to allow non-root processes to bind their preferred ports, even <1024, if the administrator so desires.

It would be cool to have a knob in rc.d scripts (eg, $mydaemon_user or something similar) to start daemons without root privileges right from the beginning and take advantage of mac_portacl's possibilities.
>How-To-Repeat:

>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200606192302.k5JN26mV004373>