> you want code to run as underprivileged as possible Agreed.
What do you think about this: We could set glance's shell to /bin/false but use commands such as the following to run the services: su -s /bin/sh -c "glance-registry" glance That way you can't log in as the glance user, but the services still don't require privileges. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/890362 Title: Should glance user's shell be /bin/false? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/glance/+bug/890362/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
