That's right, Thang.
Thanks
-Nagu

---

** [tickets:#3205] amf: remove hard-coding in amfnd**

**Status:** review
**Milestone:** 5.20.08
**Created:** Tue Jul 21, 2020 12:35 AM UTC by Anand Sundararaj
**Last Updated:** Mon Jul 27, 2020 06:30 AM UTC
**Owner:** Anand Sundararaj
**Attachments:**

- 
[amfnd_non_root_default.patch](https://sourceforge.net/p/opensaf/tickets/3205/attachment/amfnd_non_root_default.patch)
 (1.2 kB; application/octet-stream)


Amfnd is hard-coded to run as root:
"src/amf/amfnd/main.cc":
  daemonize_as_user("root", argc, argv);
This needs to be removed.

This is with reference to User Query and the patch(attached) was provided by 
Praveen:

On 13-Apr-17 7:27 PM, Carroll, James R wrote:
> Hi,
> 
> I am using openSAF 5.0, and it appears that some of the openSAF (amfnd) 
> daemons are hard-coded to run as root.
> Is there any way to disable this feature, so that I do not have to run the 
> daemon as root?
> 
> I see the following note in the README documentation:
> Only two processes are running as root, amfnd and smfnd. Reason is 
> that amfnd need todo that for backwards compatible reasons and the programs 
> it starts might be designed to require root access.
> 
> We are trying to run all of our programs as non-root.  Regarding the 
> documentation noted above, if we can start all our programs as non-root, then 
> we would not need to run the opensaf as root.

As of now, it is hard-coded in amfnd to run as root.
Attached are patches on default and 5.0 branch to enable amfnd to start as 
non-root.
After installation of OpenSAF, uncomment "#AMFND_NON_ROOT=1" line in amfnd.conf 
to enable amfnd to run as a user  as mentioned in amfnd.conf. 
By default it will run as root.

Thanks
Praveen


---

Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is 
subscribed to https://sourceforge.net/p/opensaf/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://sourceforge.net/p/opensaf/admin/tickets/options.  Or, if this is a 
mailing list, you can unsubscribe from the mailing list.
_______________________________________________
Opensaf-tickets mailing list
Opensaf-tickets@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets

Reply via email to