summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Kahn Gillmor <dkg@fifthhorseman.net>2009-02-17 20:37:47 -0500
committerDaniel Kahn Gillmor <dkg@fifthhorseman.net>2009-02-17 20:37:47 -0500
commit01d3c6d995cfe568dee7739b775dc4ce75cf6e09 (patch)
treeb4f91c9294a7f545bcb8d3719bef46b7b8b68848
parentd1e7b6ef8a1eb9e0142f5822b64a277b33daa386 (diff)
describe the motivation for our current su_monkeysphere_user implementation.
-rw-r--r--src/share/common14
1 files changed, 14 insertions, 0 deletions
diff --git a/src/share/common b/src/share/common
index 773c11f..4120259 100644
--- a/src/share/common
+++ b/src/share/common
@@ -92,6 +92,20 @@ log() {
# run command as monkeysphere user
su_monkeysphere_user() {
+ # our main goal here is to run the given command as the the
+ # monkeysphere user, but without prompting for any sort of
+ # authentication. If this is not possible, we should just fail.
+
+ # FIXME: our current implementation is overly restrictive, because
+ # there may be some su PAM configurations that would allow su
+ # "$MONKEYSPHERE_USER" -c "$@" to Just Work without prompting,
+ # allowing specific users to invoke commands which make use of
+ # this user.
+
+ # chpst (from runit) would be nice to use, but we don't want to
+ # introduce an extra dependency just for this. This may be a
+ # candidate for re-factoring if we switch implementation languages.
+
case $(id -un) in
# if monkeysphere user, run the command under bash
"$MONKEYSPHERE_USER")