Bug#469729: Run yate as non-root and use cap_sys_nice for thread priority

Jeroen Dekkers jeroen at dekkers.ch
Fri Jul 6 19:07:10 UTC 2012


tags 469729 +patch
thanks

The attached patch makes yate run as the user yate. Yate is given the
cap_sys_nice capability so it is still able to change the thread
priority. The ulimit changes can be done by changing the limit for the
yate user in /etc/security/limits.conf, we don't need to give yate
root permissions for that. So as far as I can see any concerns voiced
in the bug report has been taking care of.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: yate-runasnormaluser.patch
Type: application/octet-stream
Size: 1868 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-voip-maintainers/attachments/20120706/80517e3f/attachment.obj>
-------------- next part --------------



More information about the Pkg-voip-maintainers mailing list