On Mon, 29.07.13 18:19, Abdó Roig-Maranges (abdo.r...@gmail.com) wrote:

> I think initgroups in core/execute.c always needs privileges. It is always
> called when User=blah is set on a service file and always fails on systemd 
> user
> instances for unprivileged users. This prevents from using PAM within a 
> systemd
> user instance, for example.

Not following here. initgroups() is called before dropping prvis, so it
should always work. Can you elaborate?

Lennart

-- 
Lennart Poettering - Red Hat, Inc.
_______________________________________________
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to