[vdr] VDR 1.3.38 and "-u root"

Oliver Friedrich oliver at familie-friedrich.de
Tue Jan 10 10:41:54 CET 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Klaus Schmidinger schrieb:
> Udo Richter wrote:
> 
>> Klaus Schmidinger wrote:
>>
>>> There have been reports from people who want to run
>>> VDR as user 'root' and have trouble with access rights
>>> when using "-u root".
>>>
>>> The attached patch simply skips all the SetCaps() and SetUser()
>>> stuff when VDR is started as 'root' and the option "-u root"
>>> has been given. This should then behave just like older versions.
>>
>>
>>
>> Wouldn't it be a lot more natural and intuitive if the default for -u
>> would be not to switch users at all? It wouldn't change the (previous)
>> default behavior and it doesn't use two hard-coded user names (vdr and
>> root). Specifying -u root to disable switching is at least strange...
>>
>> Cheers,
>>
>> Udo
> 
> 
> Well, due to all the hassle with the GRAB security advisory I thought
> it might be a good idea to not let VDR run as root unless the user
> explicitly requests it.
> 
> However, I do tend to share your opinion, so if nobody disagrees
> I'll make it so that VDR always runs under the user id it was started with,
> unless the '-u' option is given (and, of course, it was started as root,
> otherwise it can't change its user id anyway).

This is the way most software works.

And with 1.3.38 it is impossible to simply get the commandline help if
no useraccount 'vdr' is present on the system and the user doesn't know
the '-u' switch ...

> [root at tinySOFA ~]# vdr --help
> vdr: unknown user: 'vdr'
> [root at tinySOFA ~]# vdr -u root --help
> Usage: vdr [OPTIONS]
> 
>   -a CMD,   --audio=CMD    send Dolby Digital audio to stdin of command CMD
>   -c DIR,   --config=DIR   read config files from DIR (default is to read them
>                            from the video directory)
>   -d,       --daemon       run in daemon mode
>   -D NUM,   --device=NUM   use only the given DVB device (NUM = 0, 1, 2...)
>                            there may be several -D options (default: all DVB
>                            devices will be used)
> ...

Oliver
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDw4FiJL9YbV++5+wRAl2ZAJ0YIuH/BjFuRCdE2tKibcpnAnNnQACbBWFf
XsGwP40hLinaxLS4qtFlyr8=
=hw4A
-----END PGP SIGNATURE-----



More information about the vdr mailing list