Re: [gentoo-user] start-stop-daemon sets USER=root - expected behaviour?

[Jil Larner]

Hi,

You may wish to specify the --user parameter. As this tool is for system
daemons (therefore located in /sbin), it seems obvious it starts daemons
as root by default. I checked on my system and I don't have a setuid bit
on this program, no more it starts any program when my wheel user
executes the command. I've no error code, but no process is spawned.

If your non root user escalates privileges and is able to spawn a root
process, *and* there is no setuid bit on /sbin/start-stop-daemon, you
may fill a bug, if you have a procedure to reproduce it ;) Honestly, as
it is a quite old debian tool, I don't think it's buggy ;)

Sincerely,
Jil

Erik Hahn a écrit :
> I'm using start-stop-daemon for making sure rc.wmii runs only once (If
> you don't know wmii's way of handling configs: it doesn't matter).
> Although I run it as user, it sets USER=root and HOME=/root. Is this
> behaviour expected or should I file a bug?
>
> 	-Erik