From d1e7b6ef8a1eb9e0142f5822b64a277b33daa386 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Tue, 17 Feb 2009 20:01:36 -0500 Subject: fix typo --- src/monkeysphere-host | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/monkeysphere-host b/src/monkeysphere-host index 2dc6003..11121cc 100755 --- a/src/monkeysphere-host +++ b/src/monkeysphere-host @@ -209,7 +209,7 @@ show_key() { # MAIN ######################################################################## -# unset variables that should be defined only in config file of in +# unset variables that should be defined only in config file or in # MONKEYSPHERE_ variables unset LOG_LEVEL unset KEYSERVER -- cgit v1.2.3 From 01d3c6d995cfe568dee7739b775dc4ce75cf6e09 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Tue, 17 Feb 2009 20:37:47 -0500 Subject: describe the motivation for our current su_monkeysphere_user implementation. --- src/share/common | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/src/share/common b/src/share/common index 773c11f..4120259 100644 --- a/src/share/common +++ b/src/share/common @@ -92,6 +92,20 @@ log() { # run command as monkeysphere user su_monkeysphere_user() { + # our main goal here is to run the given command as the the + # monkeysphere user, but without prompting for any sort of + # authentication. If this is not possible, we should just fail. + + # FIXME: our current implementation is overly restrictive, because + # there may be some su PAM configurations that would allow su + # "$MONKEYSPHERE_USER" -c "$@" to Just Work without prompting, + # allowing specific users to invoke commands which make use of + # this user. + + # chpst (from runit) would be nice to use, but we don't want to + # introduce an extra dependency just for this. This may be a + # candidate for re-factoring if we switch implementation languages. + case $(id -un) in # if monkeysphere user, run the command under bash "$MONKEYSPHERE_USER") -- cgit v1.2.3