Re: dnscache runs under daemontools, unable to bind (access denied) using runit

["Charles M. Gerungan" <charles@nednieuws.com>]

Op 20-mei-2005, om 18:03 heeft Gregg Howe het volgende geschreven:

> The "-u" option in chpst changes dnscache to an unprivileged
> user before it executes, so it isn't able to bind the UPD
> socket.  If you use "-U" instead, dnscache will be able to
> complete this before it changes to Gdnscache.

Oh, man, I think it's time to modify the manpage as -- at least to me  
-- what you said wasn't obvious:

OPTIONS
        -u user[:group]
               setuidgid.   Set uid and gid to the user's uid and  
gid.  If user
               is followed by a colon and a group, set the gid to   
group's  gid
               instead of user's gid.  All supplementary groups are  
removed.

        -U user[:group]
               envuidgid.   Set  the environment variables $UID and  
$GID to the
               user's uid and gid.  If user is followed by a colon  
and a group,
               set $GID to the group's gid instead of user's gid.

So the difference is that -u drops privileges before the program is  
invoked and -U after?

Thanks for your help. Next step: tinydns.

-- 
Regards, Charles.