diff options
author | Stefano Brivio <sbrivio@redhat.com> | 2022-05-18 19:10:45 +0200 |
---|---|---|
committer | Stefano Brivio <sbrivio@redhat.com> | 2022-05-19 16:27:20 +0200 |
commit | a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6 (patch) | |
tree | 83c88879af000c010bed7273f7518d4fc4c235b4 /passt.1 | |
parent | c318ffcb4c932752cd1f48bf5d1b0268f58895bd (diff) | |
download | passt-a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6.tar passt-a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6.tar.gz passt-a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6.tar.bz2 passt-a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6.tar.lz passt-a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6.tar.xz passt-a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6.tar.zst passt-a951e0b9efcbb64ca8b1d7c62c6c27a4498d21d6.zip |
conf: Add --runas option, changing to given UID and GID if started as root
On some systems, user and group "nobody" might not be available. The
new --runas option allows to override the default "nobody" choice if
started as root.
Now that we allow this, drop the initgroups() call that was used to
add any additional groups for the given user, as that might now
grant unnecessarily broad permissions. For instance, several
distributions have a "kvm" group to allow regular user access to
/dev/kvm, and we don't need that in passt or pasta.
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'passt.1')
-rw-r--r-- | passt.1 | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -96,6 +96,13 @@ Default is to log to system logger only, if started from an interactive terminal, and to both system logger and standard error otherwise. .TP +.BR \-\-runas " " \fIUID\fR|\fIUID:GID\fR|\fILOGIN\fR|\fILOGIN:GROUP\fR +If started as root, change to given UID and corresponding group if UID is given, +or to given UID and given GID if both are given. Alternatively, login name, or +login name and group name can be passed. +Default is to change to user \fInobody\fR if started as root. + +.TP .BR \-h ", " \-\-help Display a help message and exit. |