Bug 5046 - tlwebaccess should avoid running as root
Summary: tlwebaccess should avoid running as root
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Web Access (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: MediumPrio
Assignee: Peter Åstrand
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-03-27 09:46 CET by Pierre Ossman
Modified: 2014-04-01 11:22 CEST (History)
0 users

See Also:
Acceptance Criteria:


Attachments

Description Pierre Ossman cendio 2014-03-27 09:46:25 CET
tlwebaccess only requires root for a few things, so we should avoid running as root except for those cases.

The things that require root are:

 - Starting tlstunnel.

 - PAM authentication.

These require us to run as the relevant user (or root):

 - Talking to vsmmaster

 - Verifying session info on the agent.

Note You need to log in before you can comment on or make changes to this bug.