Skip to content

PR: Added support for user/group settings.#26

Open
thecky wants to merge 3 commits intoFreeSpacenav:masterfrom
thecky:daemon_privileges_cleanup
Open

PR: Added support for user/group settings.#26
thecky wants to merge 3 commits intoFreeSpacenav:masterfrom
thecky:daemon_privileges_cleanup

Conversation

@thecky
Copy link
Copy Markdown

@thecky thecky commented Apr 26, 2020

PR related to issue #25
This add support for user and group settings

Thomas Martens added 3 commits April 26, 2020 13:29
When the daemon was started as root (f.e. vi systemd unit),
some users had to issue the "xhost +" command for some programms
(f.e. FreeCad).
With this support, spacenavd can started as root and switch on runtime
to an other uid / gid. So a "xhost +" command isn't longer neccessary
when proper uid or gid settings are used (f.e. the "standard" user of
the system).
With the invoked uid / gid spacenavd stills open the pid and socket file
and also use it for device dection.

Also implemented user/group configfile setting.
@albfan
Copy link
Copy Markdown
Contributor

albfan commented Mar 10, 2022

Ins't is this more about set an udev rule to allow users to control device without being root?

@jtsiomb
Copy link
Copy Markdown
Contributor

jtsiomb commented Mar 11, 2022

Ins't is this more about set an udev rule to allow users to control device without being root?

No, it's about the daemon dropping priviledges for most of the code where they are not necessary. I didn't want to merge it as is, but it is quite important, so I have pulled it into its own "dropsu" branch for people who want the extra security which comes from lowering the probability of having undiscovered exploitable bugs in priviledged code. I should really keep the dropsu branch up to date with the latest changes in the master branch, to make it easier for people to use it if they need it, until I implement something similar to the master branch myself.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants