From owner-freebsd-questions@FreeBSD.ORG  Wed Oct 22 16:58:48 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B563A1065676
	for <freebsd-questions@freebsd.org>;
	Wed, 22 Oct 2008 16:58:48 +0000 (UTC)
	(envelope-from jalmberg@identry.com)
Received: from mx1.identry.com (on.identry.com [66.111.0.194])
	by mx1.freebsd.org (Postfix) with ESMTP id 4E1E68FC1D
	for <freebsd-questions@freebsd.org>;
	Wed, 22 Oct 2008 16:58:48 +0000 (UTC)
	(envelope-from jalmberg@identry.com)
Received: (qmail 28958 invoked by uid 89); 22 Oct 2008 16:58:47 -0000
Received: from unknown (HELO ?192.168.1.110?) (jalmberg@75.127.142.66)
	by mx1.identry.com with ESMTPA; 22 Oct 2008 16:58:47 -0000
In-Reply-To: <48FF54F7.6000506@infracaninophile.co.uk>
References: <8B945891-5F96-4FBF-8175-15F67F03DD92@identry.com>	<48D8F881.1010000@unsane.co.uk>	<912A74FB-0292-4A53-B480-34FE69D9C465@identry.com>	<20081020212103.GA13334@icarus.home.lan>	<007ABF71-6D85-4849-A9E7-933D18236EE8@identry.com>	<48FD8876.5090805@infracaninophile.co.uk>	<51D1673D-4689-4F9A-8217-CFC5C58A1145@identry.com>	<33DD5BC0-7D57-4530-BB59-46E2D7A43F1A@identry.com>
	<65233E01-1617-4C93-91ED-394330F31AA4@identry.com>
	<48FF54F7.6000506@infracaninophile.co.uk>
Mime-Version: 1.0 (Apple Message framework v753.1)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <6D143252-2508-4317-A6BE-5D157CDD44A9@identry.com>
Content-Transfer-Encoding: 7bit
From: John Almberg <jalmberg@identry.com>
Date: Wed, 22 Oct 2008 12:58:46 -0400
To: Matthew Seaman <m.seaman@infracaninophile.co.uk>
X-Mailer: Apple Mail (2.753.1)
Cc: freebsd-questions@freebsd.org
Subject: Re: mysql connection through ssl tunnel
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Oct 2008 16:58:48 -0000

>> Answering my own question (probably the best way)...
>> I solved this problem by figuring out how to execute the command  
>> inside the rc script as a non-root user. Like so:
>> autossh_start()
>> {
>>   echo "${command} ${command_args}"
>>   su admin -c "${command} ${command_args}"
>>   echo "started autossh"
>> }
>> This works beautifully, so I almost hesitate to ask, but is there  
>> anything wrong with this approach?
>
> Nothing, except you're re-inventing the wheel.  rc.subr already
> has a mechanism for running commands as another user.  Instead
> of defining a new start() function, simply add something like:
>
> : ${autossh_user:='admin'}
>
> towards the top of the script.  (This also means you can override
> the setting by defining 'autossh_user="someoneelse"' in /etc/rc.conf
> in the usual way)
>

Ah, fascinating. Now that I know what I'm looking for, I can see that  
in the rc.subr man page.

Thanks!