On 13 May 2014 15:44, Cameron Norman <camerontnor...@gmail.com> wrote:

> I found another use of su that may need to be added to your list. rabbitmq
> (oddly) wraps itself up in a shell script, /usr/sbin/rabbitmq-server, which
> asserts the user is root or rabbitmq, and drops down to rabbitmq if it is
> root (using su), then starts the actual binary. The problem with this one
> is that it is upstream code and cannot use s-s-d for obvious reasons.
>

I would imagine that the init.d script just needs to be modified to use the
-c option of start-stop-daemon, and that way /usr/sbin/rabbitmq-server will
be called with the correct user and won't run su.

I assume that the init.d script could also call the actual binary directly.

Do wonder how many packages call su in this manner though.
-- 
Brian May <br...@microcomaustralia.com.au>

Reply via email to