[Fwd: RTPproxy 1.1 has been released]

[Maxim Sobolev]

Marcus Better wrote:
> Hi,
> 
>> Thanks for the update and your work in rtpproxy, I have now uploaded 1.1 to 
>> Debian unstable.
> 
> I've done some more packaging work on 1.1:
> 
>   * Run as user rtpproxy instead of root.
>   * Do not return failure in stop command of init script if the daemon
> is not running.
> 
> But I have trouble running rtpproxy as non-root with ser (2.0 snapshot):
> 
> Jun 20 09:12:01 quartic /usr/sbin/ser[19598]: ERROR: send_rtpp_command:
> can't connect to RTP proxy
> Jun 20 09:12:01 quartic /usr/sbin/ser[19598]: send_rtpp_command(): proxy
> <unix:/var/run/rtpproxy/rtpproxy.sock> does not responding, disable it
> Jun 20 09:12:01 quartic /usr/sbin/ser[19598]: WARNING: rtpp_test: can't
> get version of the RTP proxy
> Jun 20 09:12:01 quartic /usr/sbin/ser[19598]: WARNING: rtpp_test:
> support for RTP proxy <unix:/var/run/rtpproxy/rtpproxy.sock>has been
> disabled temporarily
> 
> I've added the ser user to the rtpproxy group and gave group write
> permission manually to the socket file. Can someone test this to confirm?
> 
> Maxim: I applied the following patch to drop privileges earlier so that
> the control socket is created with the correct permissions. Does it look OK?

Marcus,

I don't think the patch is entirely correct. The reason is that on some 
systems the program won't be able to create socket in /var/run if not 
running as superuser (i.e. after privileges have been dropped). That's 
the reason why socket is now created before dropping the privileges. 
What needs to be done to fix the issue is to allow performing optional 
chown() operation on the control socket after its creation.

I have made the changes in the trunk version, you can find the patch for 
1.1 here:

http://sobomax.sippysoft.com/~sobomax/rtpproxy_u.diff

Please let me know if you have any other concerns.

Thank you for your input!

Regards,
-- 
Maksym Sobolyev
Sippy Software, Inc.
Internet Telephony (VoIP) Experts
T/F: +1-646-651-1110
Web: http://www.sippysoft.com