From: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH V3 2/5] package/squid: add init script
Date: Sun, 30 Nov 2014 09:33:14 +0100 [thread overview]
Message-ID: <20141130093314.2804d081@free-electrons.com> (raw)
In-Reply-To: <547A2180.2000905@oliseo.fr>
Hello,
On Sat, 29 Nov 2014 20:41:52 +0100, Guillaume GARDET - Olis?o wrote:
> >> +# (Re)create log directory and give access to squid user (nobody)
> >> +if [ ! -d $SQUID_LOG_DIR ]; then
> >> + mkdir -p $SQUID_LOG_DIR
> >> + chmod 777 $SQUID_LOG_DIR
> > Clearly, this doesn't look good. Don't we have a better option than 777
> > the log directory?
>
> Maybe create a squid user? Not sure how to handle this in buildroot. What do you think?
Well, if squid currently runs as root, why do you need to "chmod 777"
the log directory?
But indeed, it would be nicer to run squid as a user. Look at
<pkg>_USERS and <pkg>_PERMISSIONS in the Buildroot manual, or grep
through the packages for such definitions, you'll see some examples on
how to achieve that.
Best regards,
Thomas
--
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com
next prev parent reply other threads:[~2014-11-30 8:33 UTC|newest]
Thread overview: 38+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-09-18 9:27 [Buildroot] [PATCH 0/3] Add ICAP server support Guillaume GARDET
2014-09-18 9:27 ` [Buildroot] [PATCH 1/3] package/squid: enable ICAP server support in squid and define logdir, pidfile and swapdir Guillaume GARDET
2014-10-05 21:52 ` Thomas Petazzoni
2014-10-08 20:03 ` Guillaume GARDET - Oliséo
2014-10-08 20:18 ` Thomas Petazzoni
2014-10-08 20:24 ` Gustavo Zacarias
2014-10-16 9:52 ` Guillaume GARDET - Oliséo
2014-10-16 10:02 ` Thomas Petazzoni
2014-09-18 9:27 ` [Buildroot] [PATCH 2/3] New package: c-icap c-icap is an implementation of an ICAP server. Squid 3.x proxy server supports it Guillaume GARDET
2014-10-05 21:56 ` Thomas Petazzoni
2014-09-18 9:27 ` [Buildroot] [PATCH 3/3] New package: c-icap-modules Additionals modules for c-icap server Guillaume GARDET
2014-10-05 22:01 ` Thomas Petazzoni
2014-09-26 11:58 ` [Buildroot] [PATCH 0/3] Add ICAP server support Guillaume GARDET - Oliséo
2014-11-12 16:16 ` [Buildroot] [PATCH V2 0/4] " Guillaume GARDET
2014-11-12 16:16 ` [Buildroot] [PATCH V2 1/4] package/squid: define the log directory, pidfile and swapdir Guillaume GARDET
2014-11-12 16:16 ` [Buildroot] [PATCH V2 2/4] package/squid: enable ICAP server support in squid Guillaume GARDET
2014-11-16 21:38 ` Thomas Petazzoni
2014-11-18 12:47 ` Guillaume GARDET - Oliséo
2014-11-18 13:04 ` Thomas Petazzoni
2014-11-12 16:16 ` [Buildroot] [PATCH V2 3/4] c-icap: new package Guillaume GARDET
2014-11-16 21:48 ` Thomas Petazzoni
2014-11-12 16:16 ` [Buildroot] [PATCH V2 4/4] c-icap-modules: " Guillaume GARDET
2014-11-16 21:38 ` [Buildroot] [PATCH V2 0/4] Add ICAP server support Thomas Petazzoni
2014-11-18 14:54 ` [Buildroot] [PATCH V3 0/5] " Guillaume GARDET
2014-11-18 14:54 ` [Buildroot] [PATCH V3 1/5] package/squid: define the log directory, pidfile and swapdir Guillaume GARDET
2014-11-23 21:17 ` Thomas Petazzoni
2014-11-18 14:54 ` [Buildroot] [PATCH V3 2/5] package/squid: add init script Guillaume GARDET
2014-11-23 21:18 ` Thomas Petazzoni
2014-11-29 19:41 ` Guillaume GARDET - Oliséo
2014-11-30 8:33 ` Thomas Petazzoni [this message]
2014-11-18 14:54 ` [Buildroot] [PATCH V3 3/5] package/squid: enable ICAP client support in squid Guillaume GARDET
2014-11-23 21:18 ` Thomas Petazzoni
2014-11-18 14:54 ` [Buildroot] [PATCH V3 4/5] c-icap: new package Guillaume GARDET
2015-07-10 17:09 ` Thomas Petazzoni
2015-07-15 16:14 ` Guillaume GARDET - Oliséo
2014-11-18 14:54 ` [Buildroot] [PATCH V3 5/5] c-icap-modules: " Guillaume GARDET
2015-07-12 22:26 ` Thomas Petazzoni
2015-07-15 16:15 ` Guillaume GARDET - Oliséo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20141130093314.2804d081@free-electrons.com \
--to=thomas.petazzoni@free-electrons.com \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox