[SPAM!] Daemons and tricky permissions

[Stefano Melchior]

On Tue, Nov 21, 2006 at 09:52:06AM -0500, Alejandro Rios Peña wrote:
Dear Alejandro,
> The thing is that the destar daemon has a runtime feature that requires
> restarting the init script of the 'op-panel' program.
> 
> They both are being started by init scripts, using the option "--chuid
> asterisk", so they can run with the same asterisk user, but when destar
> tries to do:
> 
> /etcc/init.d/op-panel restart
> 
> I (obviuosly?) get:
> 
> Stopping Flash Operator Panel: op-panel.
> Starting Flash Operator Panel: op-panelstart-stop-daemon: Unable to set
> initgroups() with gid 113 (Operation not permitted)
> 
> I've also tried starting the daemons with "--group asterisk"  and
> "--chuid asterisk:asterisk", but it doesn't work.

from the start-stop-daemon man page you should read:

"-c|--chuid username|uid"
...
"The --group option is only for groups that the user isn’t
 normally a  member  of  (like  adding  per process group
 membership for generic users like nobody)."

In your case you used the --group option and you also used the --chuid
option with "asterisk:asterisk" argument. From my point of view you should
use either "--chuid asterisk" or "--group asterisk".
> 
> Help would be really appreciated, since this is the only thing left to
> get this packages ready for the upcoming freeze.
> 
Sincerely

SteX

-- 
Stefano Melchior, GPG key = D52DF829 - <stefano.melchior at openlabs.it>
http://www.openlabs.it/~stex    --     <stefano.melchior at openlabs.it>
http://etinarcadiaego.dyndns.org  --  <ste at etinarcadiaego.dyndns.org>
Skype ID "stefanomelchior"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 307 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-voip-maintainers/attachments/20061121/c91536a5/attachment.pgp