Re: Are there good reasons for running radiusd as user 'root'?

Maurice Makaay <[email protected]> wrote:

> > subirectory, say /var/log/radiusd, make it owned by the uid that
> > radiusd runs under, and set right priviledges to it.
> 
> This is not completely true. Radiusd calls radlog before dropping privileges
> (because the uid to run as is set in the config file and the privileges are
> dropped only after reading the configuration). So at startup, there could be
> some logfiles created by radiusd which are owned by the root user. After 
> dropping privileges radiusd can't write to them anymore.

Yes, I've overlooked it. My schedule got rather tough this week so
unfortunately I was not able to pay enough time to this question. I'll
try to fix this this weekend.

Regards,
Sergey