2008/10/6 Erik Hahn <[EMAIL PROTECTED]>:
> No, it simply shouldn't change them, there's no reason to do that (to my
> knowledge).

If start-stop-daemon is executed by a normal user it should either not
change the user to root or deny the execution if the user is not root.
I think it is a big security issue if a normal user could start
arbitrary daemons with root privileges. So you should file a bug at
bugs.gentoo.org or better a new ticket at
roy.marples.name/projects/openrc/wiki.

I think only root should be able to execute start-stop-daemon and the
user should be changed with the proper command line switches. I
actually don't know if it is --chuid or --user as this has changed
between old baselayout and new openrc.

-- 
Regards,
Daniel

Reply via email to