Re:Systemd can't handle the process privilege for username s...
by JdeBP on Sunday July 02, 2017 @06:28AM
(#14681857)
I am going with ...
root # chpst -u 0zero id
uid=1462(0zero) gid=1481(0zero) groups=1481(0zero)
root # setuidgid 0zero id
uid=1462(0zero) gid=1481(0zero) groups=1481(0zero)
root #
... I would not; I would. Both of these use the getpwnam() library function of course. Their behaviours are ...
root # chpst -u 0day id
chpst: fatal: unable to get password/group file entry: file does not exist
root # setuidgid 0day id
setuidgid: FATAL: 0day: No such user.
root #
... to abend when the account name is not found rather than continue on as the superuser without dropping privileges ...
* http://jdebp.eu./Softwares/nosh/guide/setuidgid.html
* http://cr.yp.to/daemontools/setuidgid.html
* http://untroubled.org/daemontools-encore/setuidgid.8.html
... as is documented in their user manuals, resulting in ...
... the 0day service from the headlined bug report failing to start.