Bug#293124: asterisk does not start from init script with high priority
Florian Weimer
Florian Weimer <fw@deneb.enyo.de>, 293124@bugs.debian.org
Tue, 01 Feb 2005 18:12:19 +0100
* Kilian Krause:
> yes, that's due to the fact that some other users complained about the
> -U and -G not working effectively enough for their needs. The dilemma is
> that either we let asterisk drop privileges *AFTER* setting realtime
> prio (launching as root and being limited to one group), or we switch to
> that asterisk user *BEFORE* launching asterisk (and getting all the
> groups, but asterisk user cannot set realtime-prio).
>
> Any solution that does address both issues is welcome.
In the process of dropping privileges, you should call initgroups to
set the supplemental groups list.