Re: [PATCH] Allow rrdached to set the group permissions of the Unix socket for to arbitrary groups
Tobias Oetiker <[email protected]>
| Newsgroups | gmane.comp.db.rrdtool.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Alex, Friday Alex Bennee wrote: > As partially explained in the patch comments my setup is as follows: > > * rrdcached running from upstart > > This allows upstart to ensure rrdcached is restarted if it ever dies. > Currently upstart does not offer the facility to run daemons under > another uid. > > * monitor programs also running from upstart > > Again to ensure they never die > > * Perl CGI scripts running from www-data as part of Apache > > These generate graphs on demand. As the RRD graph tool needs to ensure > data is flushed to the RRD before graph generation occurs it needs to > communicate to rrdcached socket to do this. > > I did consider another approach which was to drop privileges of > rrdcached after starting. However it seemed to be a more complex > solution to the problem and likely more fragile. the patch looks about right to me ... if you throw in a patch for the documentation too, I'll be glad to integrate it ... cheers tobi > > -- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland http://it.oetiker.ch [email protected] ++41 62 775 9902 / sb: -9900