On Sun, Jul 26, 2015 at 08:14:22PM +0200, Jakub Hrozek wrote:
> > +int sss_tool_main(int argc, const char **argv,
> > +                  struct sss_route_cmd *commands,
> > +                  void *pvt)
> > +{
> > +    struct sss_tool_ctx *tool_ctx;
> > +    uid_t uid;
> > +    int ret;
> > +
> > +    uid = getuid();
> > +    if (uid != 0) {
> > +        DEBUG(SSSDBG_CRIT_FAILURE, "Running under %d, must be root\n", 
> > uid);
> 
> I think here it should be either root or sssd user. Even better might be
> to try and gracefully fail if opening the databases fail -- I don't mind
> which solution you choose.

Please ignore this, of course requiring root for a /tool/ is the right
thing to do. Sorry.
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

Reply via email to