Scott Lawrence wrote:

>Cc: [email protected]
>Subject: Re: [sipX-dev] upgrade scripts do not work reliably 
>when run through XML/RPC?
>
>On Mon, 2009-05-04 at 10:55 -0400, Damian Krzeminski wrote:
>> Scott Lawrence wrote:
>> > On Mon, 2009-05-04 at 09:59 -0400, Damian Krzeminski wrote:
>> >> http://track.sipfoundry.org/browse/XX-5396
>> >>
>> >> We now have a patches that trigger upgrades through XML/RPC But 
>> >> Bogdan reports that XML/RPC for upgrades does not work reliably.
>> >>
>> >> Can anyone help testing this?
>> > 
>> > Have you got a binary setuid wrapper for the 'yum update 
>-y' command?
>> > That command can only be run as root, and sipXsupervisor 
>is running 
>> > as SIPXPBXUSER.
>> 
>> Paraphrasing a sipXecs coordinator let me ask "what do you mean by 
>> you?" ;-)
>> 
>> Unless I misunderstood something sipXconfig user does not really 
>> matter
>> here: sipXconfig calls XML/RPC method and sipx-supervisor that 
>> implement the method needs to be able to run those scripts.
>
>Fair...
>
>Does sipXsupervisor execute the 'yum update -y' command 
>_as_root_ by running some binary setuid program?
>
>If not, it's not going to work.

Yes, sipXsupervisor is executing a wrapper which is running as root
(guaranteed).

Raymond
_______________________________________________
sipx-dev mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev

Reply via email to