[pkg-bacula-devel] 7.4.3+dfsg-4 uploaded to experimental

[Sven Hartge]

On 29.08.2016 15:56, Carsten Leonhardt wrote:

> But maybe we should merge the systemd-fixuser branch first, as it
> touches this area too?

I am fine with both.

But before we go anywhere with the fixuser-branch I want to ask some
things on bacula-devel concerning "-k" and "-u user -g group" and
capabilites.

As you know, upstreams init-scripts and systemd units not longer use "-u
user -g group" because it breaks automatic backtraces but instead
upstream relies on either start-stop-daemon or systemd to change the user.

But this conflicts with the usage of "-k" which needs "-u user -g group"
to internally set the capability before dropping root.

In the systemd-fixuser branch I use setcap to set the needed
capabilities in the filesystem (like for example ping does) and then
start the filed as user bacula:bacula.

I want to ask Kern/bacula-devel if this is an acceptable approach or if
they see any problems with it.

Grüße,
Sven.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-bacula-devel/attachments/20160829/e355e142/attachment.sig>