RFC: init-d-script add optional setpriv wrapper for s-s-d.
Thorsten Glaser
tg at debian.org
Wed Sep 4 13:52:51 BST 2024
Hi Mark,
[…]
>So, it certainly *can* work.
yes, for that case. But in general, the dropping point needs
to be between the starter and the startee; e.g. in daemontools,
it’s in the /service/*/run scripts that then exec the dæmon in
question.
>I will experiment more to see if you can drop
>sufficient capabilities to break s-s-d.
Maybe.
But IIRC you can just tell s-s-d which command to start,
which can then be different from the executable name to
test for for matching. That’d probably be a better point
to inject setpriv into.
bye,
//mirabilos
--
(gnutls can also be used, but if you are compiling lynx for your own use,
there is no reason to consider using that package)
-- Thomas E. Dickey on the Lynx mailing list, about OpenSSL
More information about the Debian-init-diversity
mailing list