-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Klaus Schmidinger schrieb: > Udo Richter wrote: > >> Klaus Schmidinger wrote: >> >>> There have been reports from people who want to run >>> VDR as user 'root' and have trouble with access rights >>> when using "-u root". >>> >>> The attached patch simply skips all the SetCaps() and SetUser() >>> stuff when VDR is started as 'root' and the option "-u root" >>> has been given. This should then behave just like older versions. >> >> >> >> Wouldn't it be a lot more natural and intuitive if the default for -u >> would be not to switch users at all? It wouldn't change the (previous) >> default behavior and it doesn't use two hard-coded user names (vdr and >> root). Specifying -u root to disable switching is at least strange... >> >> Cheers, >> >> Udo > > > Well, due to all the hassle with the GRAB security advisory I thought > it might be a good idea to not let VDR run as root unless the user > explicitly requests it. > > However, I do tend to share your opinion, so if nobody disagrees > I'll make it so that VDR always runs under the user id it was started with, > unless the '-u' option is given (and, of course, it was started as root, > otherwise it can't change its user id anyway). This is the way most software works. And with 1.3.38 it is impossible to simply get the commandline help if no useraccount 'vdr' is present on the system and the user doesn't know the '-u' switch ... > [root@tinySOFA ~]# vdr --help > vdr: unknown user: 'vdr' > [root@tinySOFA ~]# vdr -u root --help > Usage: vdr [OPTIONS] > > -a CMD, --audio=CMD send Dolby Digital audio to stdin of command CMD > -c DIR, --config=DIR read config files from DIR (default is to read them > from the video directory) > -d, --daemon run in daemon mode > -D NUM, --device=NUM use only the given DVB device (NUM = 0, 1, 2...) > there may be several -D options (default: all DVB > devices will be used) > ... Oliver -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDw4FiJL9YbV++5+wRAl2ZAJ0YIuH/BjFuRCdE2tKibcpnAnNnQACbBWFf XsGwP40hLinaxLS4qtFlyr8= =hw4A -----END PGP SIGNATURE-----
