Re: [systemd-devel] Simple question.

2013-01-30 Thread David Strauss
On Wed, Jan 30, 2013 at 5:17 AM, Daniel J Walsh wrote: > I am trying to implement the OpenShift model using Secure Linux Containers. > Each Gear/User in an OpenShift environment has an apache service listening on > port 8080 (I believe) on a localhost IPAddress. The host machine also has an > apa

Re: [systemd-devel] Simple question.

2013-01-30 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/26/2013 08:07 PM, David Strauss wrote: > On Fri, Jan 25, 2013 at 12:42 PM, Mantas Mikulėnas > wrote: >> That some users may want to take advantage of modern Linux features and >> run httpd without *ever* giving it full root privileges – which it

Re: [systemd-devel] Simple question.

2013-01-26 Thread David Strauss
On Fri, Jan 25, 2013 at 12:42 PM, Mantas Mikulėnas wrote: > That some users may want to take advantage of modern Linux features > and run httpd without *ever* giving it full root privileges – which it > needs for precisely two things, bind() and setuid(). That's another reason why socket activati

Re: [systemd-devel] Simple question.

2013-01-25 Thread Reindl Harald
Am 25.01.2013 23:35, schrieb Kok: >> and what does this change in the fact that httpd has >> it's own configuration options for user and group? > > Users may not have root permissions in the first place? > > It's not a weird question, I used to do this with apache-1.3 and run > it under xinetd

Re: [systemd-devel] Simple question.

2013-01-25 Thread Kok, Auke-jan H
On Fri, Jan 25, 2013 at 9:16 AM, Reindl Harald wrote: > > > Am 25.01.2013 18:14, schrieb Mantas Mikulėnas: >> On Fri, Jan 25, 2013 at 6:50 PM, Reindl Harald >> wrote: >>> Am 25.01.2013 17:42, schrieb Daniel J Walsh: How would I write a unit file to run an apache service as the user dwalsh

Re: [systemd-devel] Simple question.

2013-01-25 Thread Mantas Mikulėnas
On Fri, Jan 25, 2013 at 7:16 PM, Reindl Harald wrote: > > > Am 25.01.2013 18:14, schrieb Mantas Mikulėnas: >> On Fri, Jan 25, 2013 at 6:50 PM, Reindl Harald >> wrote: >>> Am 25.01.2013 17:42, schrieb Daniel J Walsh: How would I write a unit file to run an apache service as the user dwalsh

Re: [systemd-devel] Simple question.

2013-01-25 Thread Lennart Poettering
On Fri, 25.01.13 11:42, Daniel J Walsh (dwa...@redhat.com) wrote: > How would I write a unit file to run an apache service as the user dwalsh > (3267) User= in the [Service] section is what you are looking for. Lennart -- Lennart Poettering - Red Hat, Inc.

Re: [systemd-devel] Simple question.

2013-01-25 Thread Reindl Harald
Am 25.01.2013 18:14, schrieb Mantas Mikulėnas: > On Fri, Jan 25, 2013 at 6:50 PM, Reindl Harald wrote: >> Am 25.01.2013 17:42, schrieb Daniel J Walsh: >>> How would I write a unit file to run an apache service as the user dwalsh >>> (3267) >> why would someone do this with systemd? >> httpd nee

Re: [systemd-devel] Simple question.

2013-01-25 Thread Mantas Mikulėnas
On Fri, Jan 25, 2013 at 6:50 PM, Reindl Harald wrote: > > > Am 25.01.2013 17:42, schrieb Daniel J Walsh: >> How would I write a unit file to run an apache service as the user dwalsh >> (3267) > why would someone do this with systemd? > httpd needs to get started as root to bind the port! Not if

Re: [systemd-devel] Simple question.

2013-01-25 Thread Reindl Harald
Am 25.01.2013 17:42, schrieb Daniel J Walsh: > How would I write a unit file to run an apache service as the user dwalsh > (3267) why would someone do this with systemd? httpd needs to get started as root to bind the port! systemd supports such nice things but it is completly wrong for daemons

[systemd-devel] Simple question.

2013-01-25 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 How would I write a unit file to run an apache service as the user dwalsh (3267) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlECthIACgkQrlYvE4MpobNjEQCf