reading /etc/bird.conf (bird 1.3.4)

[Ondrej Zajicek]

On Sat, Oct 22, 2011 at 07:41:30PM +0200, Arkadiusz Miśkiewicz wrote:
> 
> relevant difference:
> -Groups:
> +Groups:        0 1 2 3 4 6 10

> 
> So two things to do:
> - open bird.conf before dropping privledges

As mentioned, not a good idea because of reconfigure.

> - drop supplementary groups (or better set these groups based
> on where user (specified at "-u user") belongs)

You are right about supplementary groups. But i think it is probably
better to just drop them (if option -g is used). Your problem would
be solved by setting proper group to bird.conf.

-- 
Elen sila lumenn' omentielvo

Ondrej 'SanTiago' Zajicek (email: santiago at crfreenet.org)
OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net)
"To err is human -- to blame it on a computer is even more so."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://trubka.network.cz/pipermail/bird-users/attachments/20111024/98ab0970/attachment-0001.asc>