Re: Introducing CurveDNS a DNSCurve forwarding name server

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 25.10.2010 15:48, Harm van Tilborg wrote:

> I'm changing it in the next release, making it a bit harder to easily
> specify the effective uid and gid -- since envuidgid cannot be used anymore.

I'm not convinced that's a good idea. It was really easy to set up
curvedns _because_ it worked mostly like dnscache or tinydns.

This is the "run" file I use:

#!/bin/sh
exec 2>&1
exec envdir ./env sh -c '
  exec envuidgid dnscache /usr/sbin/curvedns "$IP" "$PORT" "$FORWARD"
"$FORWARD_PORT"
'
(yes, I use the same user/group as for dnscache)

> I think `CURVEDNS_USER' will house the user CurveDNS is about to run
> under when root privileges are not needed anymore.

Maybe you could make that an additional option and use $UID/$GID if
$CURVEDNS_USER is unset.


Hauke.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkzFnUAACgkQKIgAG9lfHFMS+ACgrSgtWWsyYiIx65knOlqdM899
JJcAn2BlE1NKiq0ZkogAlczaGHXhXmNC
=lZi8
-----END PGP SIGNATURE-----