| Re: [chrony-dev] [PATCH] MacOS X - Drop root privilege |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-dev Archives
]
- To: chrony-dev@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: [chrony-dev] [PATCH] MacOS X - Drop root privilege
- From: Bryan Christianson <bryan@xxxxxxxxxxxxx>
- Date: Tue, 24 Nov 2015 20:42:31 +1300
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=smtpcorp.com; s=a0-2; h=Feedback-ID:X-Smtpcorp-Track:To:Message-Id:Date: From:Subject; bh=zAQEOSj5oY3S4AWX9Nyi5Jk9N802q53PzxrXHEc+NVk=; b=u2nxn4k1Nfay QYUjLWfXnoIIlBRwdwRsEGobz3InJDkTZqniw7GDk/22HDI8t5smPQSYMwFrSAMGO4wJ8vdini4+Z 4TI5Ew9yulinVX13HHYRryeLCbxssjpTtf/j3mlufM29hgQaPapxmUi5ABoTHZPX31x0PUezaiZvv Ta2fgDpZWwVfnFs8Y7p2rf7DPek4J1qWwxb9LV6C8D248J4493OhcM2mktmq9zjssb4550YFjaI+K XrJcSDkoE6JpfotgL33CcmQ9vs4OZaVxAqhon6nJPptwhWl3+yeivXSpbiXLRsEfJUvu1nmsiI6sS 5rHu//1V5TrykefMXiNXxA==;
- Feedback-id: 149811m:149811acx33YQ:149811s9Z0jh3Sho:SMTPCORP
> On 24/11/2015, at 8:28 PM, Miroslav Lichvar <mlichvar@xxxxxxxxxx> wrote:
>
> On Tue, Nov 24, 2015 at 08:41:06AM +1300, Bryan Christianson wrote:
>> @@ -978,7 +978,8 @@ This option sets the name of the system user to which @code{chronyd} will
>> switch after start in order to drop root privileges. It overrides the
>> @code{user} directive (default @code{@DEFAULT_USER@}). It may be set to a
>> non-root user only when @code{chronyd} is compiled with support for Linux
>> -capabilities (libcap) or on NetBSD with the @code{/dev/clockctl} device.
>> +capabilities (libcap), on NetBSD with the @code{/dev/clockctl} device or on
>> +MacOS X.
>
> Could this explain the privilege separation? The users might want to
> know why there are two processes running and one keeps the root
> privileges. Please feel free to rewrite that section completely if it
> doesn't fit well there.
>
> Also, is it MacOS X or Mac OS X? Wikipedia suggests the latter.
>
Actually its neither - see https://en.wikipedia.org/wiki/OS_X
It should just be OS X, but somehow I think we should use Mac OS X to be clear what we're referring to.
--
Bryan Christianson
bryan@xxxxxxxxxxxxx
--
To unsubscribe email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "unsubscribe" in the subject.
For help email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.