Bug#293124: asterisk does not start from init script with high priority

Florian Weimer Florian Weimer <fw@deneb.enyo.de>, 293124@bugs.debian.org
Tue, 01 Feb 2005 18:12:19 +0100


* Kilian Krause:

> yes, that's due to the fact that some other users complained about the
> -U and -G not working effectively enough for their needs. The dilemma is
> that either we let asterisk drop privileges *AFTER* setting realtime
> prio (launching as root and being limited to one group), or we switch to
> that asterisk user *BEFORE* launching asterisk (and getting all the
> groups, but asterisk user cannot set realtime-prio).
>
> Any solution that does address both issues is welcome.

In the process of dropping privileges, you should call initgroups to
set the supplemental groups list.