From: Michael Olbrich <m.olbrich@pengutronix.de>
To: Roland Hieber <rhi@pengutronix.de>, ptxdist@pengutronix.de
Subject: Re: [ptxdist] [PATCH] avahi: use working defaults for user/group
Date: Fri, 29 Nov 2024 09:35:38 +0100 [thread overview]
Message-ID: <Z0l82n6UYtCN44of@pengutronix.de> (raw)
In-Reply-To: <20241110230121.1282197-1-rhi@pengutronix.de>
On Mon, Nov 11, 2024 at 12:01:22AM +0100, Roland Hieber wrote:
> As stated by the (slightly outdated) comments, no user or group named
> "avahi" or "avahi-autoipd" exists in the default /etc/passwd or
> /etc/group in PTXdist, so Avahi will complain about the missing
> user/group and refuse to start with the default configuration. Set the
> default values to the unprivileged "nobody"/"nogroup" instead, which
> already exist, and remove the outdated comments.
Nack. These services have separate users for a reason.
I understand that adding users is currently awkward. I've been thinking
about better ways to do this for some time. I'm open for ideas about that.
Regards,
Michael
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> ---
> rules/avahi.in | 20 ++++----------------
> 1 file changed, 4 insertions(+), 16 deletions(-)
>
> diff --git a/rules/avahi.in b/rules/avahi.in
> index a038a1efeb2a..90ef7088110b 100644
> --- a/rules/avahi.in
> +++ b/rules/avahi.in
> @@ -74,22 +74,16 @@ if AVAHI_DAEMON
> config AVAHI_USER
> string
> prompt "user for running the avahi (mDNS/DNS-SD) daemon"
> - default "avahi"
> + default "nobody"
> help
> Enter the user name to run the avahi (mDNS/DNS-SD) daemon with.
> - The PTXdist standard configuration has only root, so if you want
> - to use the avahi default user "avahi" you have to create
> - a related user yourself.
>
> config AVAHI_GROUP
> string
> prompt "group for running the avahi (mDNS/DNS-SD) daemon"
> - default "avahi"
> + default "nogroup"
> help
> Enter the group name to run the avahi (mDNS/DNS-SD) daemon with.
> - The PTXdist standard configuration has only root, so if you want
> - to use the avahi default group "avahi" you have to create
> - a related group yourself.
>
> config AVAHI_SERVICES
> bool
> @@ -130,22 +124,16 @@ if AVAHI_AUTOIP
> config AVAHI_AUTOIP_USER
> string
> prompt "user for running the avahi autoip (IPv4LL) daemon"
> - default "avahi-autoipd"
> + default "nobody"
> help
> Enter the user name to run the avahi autoip (IPv4LL) daemon with.
> - The PTXdist standard configuration has only root, so if you want
> - to use the avahi default user "avahi-autoipd" you have to create
> - a related user yourself.
>
> config AVAHI_AUTOIP_GROUP
> string
> prompt "group for running the avahi autoip (IPv4LL) daemon"
> - default "avahi-autoipd"
> + default "nogroup"
> help
> Enter the group name to run the avahi autoip (IPv4LL) daemon with.
> - The PTXdist standard configuration has only root, so if you want
> - to use the avahi default group "avahi-autoipd" you have to create
> - a related group yourself.
> endif
>
> config AVAHI_COMPAT
> --
> 2.39.5
>
>
>
--
Pengutronix e.K. | |
Steuerwalder Str. 21 | http://www.pengutronix.de/ |
31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
prev parent reply other threads:[~2024-11-29 8:35 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-11-10 23:01 Roland Hieber
2024-11-29 8:35 ` Michael Olbrich [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Z0l82n6UYtCN44of@pengutronix.de \
--to=m.olbrich@pengutronix.de \
--cc=ptxdist@pengutronix.de \
--cc=rhi@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox