From owner-freebsd-questions@freebsd.org Wed Sep 29 04:29:40 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7F98166A57F for ; Wed, 29 Sep 2021 04:29:40 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK3LW4qyWz3vSj for ; Wed, 29 Sep 2021 04:29:39 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 68B325C018D for ; Wed, 29 Sep 2021 00:29:39 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Wed, 29 Sep 2021 00:29:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=ClCCPnba1eWCkWL5VKnU0duKcNk uyqaKK/+trVB67Vs=; b=3Kk9Se3oHhoWlWa4aMkA9X6V+n/xpvFtwHroZfQT9lo 3ZB8VSQaOM8290N0Vv8bk+XESQrwiToX9wf+QDWaR5VYymyIy0GhHxtGlpSxi1I+ PSSBSvY3LUs3RQlaNXcQb4ulCCibmhUp8+oV6UVIVySYDvAcpPRlmOmZagJyWeMP JTQaKmYsH7CSVie8Fqx97lboHy1wyeC/RxfCPggqQ6/6dvHmMGDZsV7gk32XOnea 45PlxL2eQK7f201koVgMBVNuKBrw1MSHOT3eUzWfGwT7J0ClZ/4Fvmh60FiUXgCX MTXj+UrY4PAfMnYgjOZAmqv5eoQnrDSzqYzFpxmLiIg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=ClCCPn ba1eWCkWL5VKnU0duKcNkuyqaKK/+trVB67Vs=; b=GW5Ze6EBXUt/nwnpt2n613 b29Xu5onRfZpunZUUSEoDnm3GB8BhoAg6z5ME2aG1yiuUmldhzSzaDynskQzSj8w D2cBK3Ex8UZGkdqkHN2IC5c96p9K66/V8anSTpBmEyIXFdYBetEW9gNLooz1gQOW s8963RF0V72V7mIEs5RNY8YvtA3FIPUqJ9zjOeOWQwNb9y7k/GLWjrVSItMfeaAU 4wLvQ6gZ7bI1FdeYOKZTbt/y2NdRQ9A5v4DP2gjFgdmeKI2d/wGUyxpb9NY8qvdC AkoCv6KomEOYIe20MED+AK+ko8dxXZNSQ0KeMoGKilTaVID9sf0h2rVjTWeHtoHw == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekuddgkedvucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpedtheeigfdvudefkeekvddtfedvte dttdekuddvgeevlefftdekffdujedvhfduteenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Wed, 29 Sep 2021 00:29:38 -0400 (EDT) Date: Wed, 29 Sep 2021 05:29:37 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: what userid do you update system sources under? Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="oedFJJ2SLFqeLB8P" Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HK3LW4qyWz3vSj X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=3Kk9Se3o; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=GW5Ze6EB; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 66.111.4.26) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-5.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; RWL_MAILSPIKE_GOOD(0.00)[66.111.4.26:from]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.0.0/20, country:US]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[66.111.4.26:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 04:29:40 -0000 --oedFJJ2SLFqeLB8P Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 28, 2021 at 04:46:15PM -0400, Dan Langille wrote: >Are you referring to /usr/src? for example... > >I would do that as root. When fetching /usr/src with git, are you doing it from system crontab (and specifying a non-root userid), or are you doing it as root, or as some other user/group which has its own crontab? I'm wondering if it's=20 suboptimal from a system security standpoint to run git as the root=20 user. --=20 J. --oedFJJ2SLFqeLB8P Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFT66cACgkQs8o7QhFz NAWiBw//ezHeDOzF8pGRoFb9K9Jubhpuy17guBlf+IRoBJj4SDy77Lh5KMnuCPE9 b/NX1kyXMGusyZIQ3/RaprKBTB8KUAD2AKUUDm0uWZ5VidyHWhgDrRyyFTQNOV6u HvfK1ts7Z76vzmcAL5lkxrG6s0usy3X5qKgeBr0kcByW3r4cQyvAAtSFXV11M5Ut 5l+DKEHDF7GEglQXfhhuW1TfWbt74RBDGCqtT6j+5ENpxjLA+BrK7PdVHf5oogi9 siinxu4cX8VxXFqtBD0BXpWLRwVxvtQSC1x9Zj+4QVUk2Y6QhG/2lskGO9uIond/ sfc3ltTWJbDSulVr8gKdBItSdG/NQ18HVm2BuDXb85meBEA0HZEpdP19vEIDbJ4Y oOKxTOCTb2opU/nWJKbU9ua34EBkRrCvwybylDtvQGPti77FBcoIXBQn+dcLB3dV Z0bNZjkxnf10vwxZ2k+pzIN2Yn2A7BoNLIcXJpy92tH9Jn808CtSlaVnxfwWoSHI lV6psGmlIU2W6igtX2l/VnB0caZ+3J9MWcU9pY3chAcdoxJ0MMUb5UCB2YayIjOW XU/+Z0dg1HSF8YNCutxHJs5jRcdTecqsVc8zdc9IuEfbLpuHLz1cqfhO1jfmK7KH /HCGyWCKIGcWK1SAjwM87DPZh7igdni3FxP9rkW0HLbkbtrzn/s= =354/ -----END PGP SIGNATURE----- --oedFJJ2SLFqeLB8P--