On Sun, 04 Dec 2005 20:48:02 -0500 [EMAIL PROTECTED] wrote:
CRC> > Can you expand on that? I think the original idea for changing 
CRC> > user/group was to have reduced privileges while running. The 
CRC> > primary advantage probably being that scripts and such wouldn't
CRC> > run as root. It's still reasonable to expect
CRC> > that the agent's configuration files would be owned by root, and 
CRC> > not the non-privileged user.
CRC> 
CRC> Except that as snmpd shuts down it rewrites the persistent store as the
CRC> -u/-g user.  To be consistent, we either need to move the -u/-g
CRC> processing up, or revert to root/root when saving persistent values at
CRC> shutdown.  Right?

Yes, though the persistent store can be written at other times too. The
temporary switch to root would probably be needed in other scenarios too (I
think some platforms use kernel APIs that require root access).

-- 
Robert Story; NET-SNMP Junkie
Support: <http://www.net-snmp.org/> <irc://irc.freenode.net/#net-snmp>
Archive: <http://sourceforge.net/mailarchive/forum.php?forum=net-snmp-coders>

You are lost in a twisty maze of little standards, all different. 


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to