RFC: init-d-script add optional setpriv wrapper for s-s-d.

Thorsten Glaser tg at debian.org
Wed Sep 4 13:52:51 BST 2024


Hi Mark,

[…]
>So, it certainly *can* work.

yes, for that case. But in general, the dropping point needs
to be between the starter and the startee; e.g. in daemontools,
it’s in the /service/*/run scripts that then exec the dæmon in
question.

>I will experiment more to see if you can drop
>sufficient capabilities to break s-s-d.

Maybe.

But IIRC you can just tell s-s-d which command to start,
which can then be different from the executable name to
test for for matching. That’d probably be a better point
to inject setpriv into.

bye,
//mirabilos
-- 
(gnutls can also be used, but if you are compiling lynx for your own use,
there is no reason to consider using that package)
	-- Thomas E. Dickey on the Lynx mailing list, about OpenSSL



More information about the Debian-init-diversity mailing list