On Tue, 2019-02-05 at 13:22 -0500, drew Roberts wrote:
> Make an easy way for testing how things run when rivendell gets to
> running it.
> 
> Could we use a little script (or would we need something more?) that
> does an su to 'AudioOwner' (and group?) and sets up the environment
> to be what it is when riv runs the RML, then run the command and then
> put things back to "normal..."
> 
> This could be put in the /etc/sudoers.d directory so that the normal
> rd user does not need a password to run it. Bonus points if it is
> possible to run this in some sort of test mode that will report back
> on what it would have done without doing it.
> 
> Does this make any sense at all.

It does. Basically, a 'sandbox' for testing things out.

I suspect we'd need a sudoers rule for it. That could be quite
difficult to implement in a distro-neutral manner (not to mention
presenting some 'interesting' packaging issues).

I confess that my main beef about 'RN' as it currently stands is that
it is not at all intuitive, where 'intuitive' == 'works the way the
user expects it to'. (See 
https://www.quora.com/What-is-meant-by-an-intuitive-interface for a
good overview). Admittedly, different users can have different
expectations. I know that if *I* walked up to a system out-of-the-blue
and ran a function called 'Run Shell Command', I would expect it to do
just that, using my current security context. I would *not* expect to
have to first go dig up some special user/group information in some
obscure configuration file somewhere. It feels ... wrong somehow.

Cheers!


|---------------------------------------------------------------------|
| Frederick F. Gleason, Jr. |             Chief Developer             |
|                           |             Paravel Systems             |
|---------------------------------------------------------------------|
|         A room without books is like a body without a soul.         |
|                                                                     |
|                                                         -- Cicero   |
|---------------------------------------------------------------------|

_______________________________________________
Rivendell-dev mailing list
[email protected]
http://caspian.paravelsystems.com/mailman/listinfo/rivendell-dev

Reply via email to