On Sun, Jul 26, 2015 at 08:14:22PM +0200, Jakub Hrozek wrote: > > +int sss_tool_main(int argc, const char **argv, > > + struct sss_route_cmd *commands, > > + void *pvt) > > +{ > > + struct sss_tool_ctx *tool_ctx; > > + uid_t uid; > > + int ret; > > + > > + uid = getuid(); > > + if (uid != 0) { > > + DEBUG(SSSDBG_CRIT_FAILURE, "Running under %d, must be root\n", > > uid); > > I think here it should be either root or sssd user. Even better might be > to try and gracefully fail if opening the databases fail -- I don't mind > which solution you choose.
Please ignore this, of course requiring root for a /tool/ is the right thing to do. Sorry. _______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-devel