[JIRA] Resolved: (SSPCPP-353) Package the SP to run as non-root user

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SSPCPP-353?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved SSPCPP-353.
---------------------------------

       Resolution: Fixed
    Fix Version/s: 2.5

Changes made to use sysconfig/shibd to set user account and LD_LIBRARY_PATH on RH6.

http://svn.shibboleth.net/view/cpp-sp?view=revision&revision=3510
http://svn.shibboleth.net/view/cpp-sp?view=revision&revision=3511


> Package the SP to run as non-root user
> --------------------------------------
>
>                 Key: SSPCPP-353
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-353
>             Project: Shibboleth SP - C++
>          Issue Type: Improvement
>          Components: Installation
>    Affects Versions: 2.4, 2.4.1, 2.4.2, 2.4.3
>         Environment: CentOS 5.5 / Shibboleth 2.3.1 from openSUSE repos
>            Reporter: Takeshi NISHIMURA
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 2.5
>
>         Attachments: shibd-runuser.diff
>
>   Original Estimate: 1 week
>          Time Spent: 2 hours, 30 minutes
>  Remaining Estimate: 4 days, 5 hours, 30 minutes
>
> Updating Shibboleth SP by "yum update" changes owner:group and permissions of /var/{run,log}/shibboleth to the default (root:root and rwxrwxr-x) even if they already exist. Please preserve these permissions on updates if they already exist.
> I am running shibd with user "shibboleth".
> I am using those directories with following permissions:
> rwxrwxr-x root:shibboleth /var/log/shibboleth
> rwxrwxr-x root:shibboleth /var/run/shibboleth
> , and had troubles on every recent updates.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira