Re: [ptxdist] [PATCH] pulseaudio: version bump 8.0 -> 11.0

2018-03-21 Thread Lucas Stach
Am Freitag, den 08.09.2017, 17:51 +0200 schrieb Clemens Gruber:
> Hi,
> 
> On Fri, Sep 08, 2017 at 05:15:18PM +0200, Lucas Stach wrote:
> > > > Signed-off-by: Lucas Stach 
> > ---
> > I'm unsure about the with-system-user, with-system-group and
> > with-access-group configure settings, so someone should probably
> > validate them.
> 
> Passing --with-system-user=root is not a good idea. I think we should
> use a system user like nobody or a special "pulse" user (the default),
> because PulseAudio can then drop privileges and change to that user
> after startup.
> Not sure if a tmpfiles.d file is necessary for /run/pulse or if
> PulseAudio creates the directory with correct permissions.

Michael, I would really appreciate some guidance on how you would like
to have this handled.

Regards,
Lucas

___
ptxdist mailing list
ptxdist@pengutronix.de

Re: [ptxdist] [PATCH] pulseaudio: version bump 8.0 -> 11.0

2017-09-11 Thread Juergen Borleis
Hi Lucas,

On Friday 08 September 2017 17:15:18 Lucas Stach wrote:
> [...]
> + --with-system-user=root \
> + --with-system-group=root \
> [...9

Like Clemens already stated: forcing to "root" is a no-go.

jb

___
ptxdist mailing list
ptxdist@pengutronix.de

Re: [ptxdist] [PATCH] pulseaudio: version bump 8.0 -> 11.0

2017-09-08 Thread Clemens Gruber
Hi,

On Fri, Sep 08, 2017 at 05:15:18PM +0200, Lucas Stach wrote:
> Signed-off-by: Lucas Stach 
> ---
> I'm unsure about the with-system-user, with-system-group and
> with-access-group configure settings, so someone should probably
> validate them.

Passing --with-system-user=root is not a good idea. I think we should
use a system user like nobody or a special "pulse" user (the default),
because PulseAudio can then drop privileges and change to that user
after startup.
Not sure if a tmpfiles.d file is necessary for /run/pulse or if
PulseAudio creates the directory with correct permissions.

Cheers,
Clemens

___
ptxdist mailing list
ptxdist@pengutronix.de