On Sun, Jul 26, 2015 at 08:14:22PM +0200, Jakub Hrozek wrote:
> +int sss_tool_main(int argc, const char **argv,
> + struct sss_route_cmd *commands,
> + void *pvt)
> +{
> + struct sss_tool_ctx *tool_ctx;
> + uid_t uid;
> + int ret;
> +
> + uid = getuid();
> + if (uid != 0) {
> + DEBUG(SSSDBG_CRIT_FAILURE, "Running under %d, must be root\n",
uid);
I think here it should be either root or sssd user. Even better might be
to try and gracefully fail if opening the databases fail -- I don't mind
which solution you choose.
Please ignore this, of course requiring root for a /tool/ is the right
thing to do. Sorry.