Dan Perik <[EMAIL PROTECTED]> wrote:
> So it seems FreeRadius is dropping root before it tries to write the
> pid file.

  Yes.
 
> Does this matter?  It seems to throw off the RedHat init script a bit,
> but other than that it seems to not be a problem.  I wonder about log
> rotation later on, or anything other such thing that might bite me
> later.  Any comments?

  It may matter.  The problem is that you do NOT want a root process
writing files to various places in your directory tree.  If something
goes wrong, then bad things can happen.

  On the other hand, every other daemon process writes he PID file as
root, and then changes UID.  FreeRADIUS should probably go along, too.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to