Hi Hugues,

On 1/21/12 7:29 PM, Hugues Hardel wrote:
I am using supervisor to start a server running on port 80. Ideally, I'd need
to bootstrap the process as the root user (so the server can bind to port 80),
and then change the program owner to a non-root user (more secure).

My understanding is that the user setting of the program section is designed
to do exactly that, but it doesn't seem to work in my case. I am wondering if
maybe supervisor switches user too fast? I.e before the program has the time
to bind to port 80?

Privileges will be dropped before the program is started.

If you specify "user=" in a "[program:]" section of the config file and supervisord is run as root, then it will setuid to the user specified before the program is started via fork-exec.

Regards,
Mike

--
Mike Naberezny
Maintainable Software
http://maintainable.com
_______________________________________________
Supervisor-users mailing list
[email protected]
http://lists.supervisord.org/mailman/listinfo/supervisor-users

Reply via email to