26 Jul
2015
26 Jul
'15
2:41 p.m.
On Sun, Jul 26, 2015 at 08:14:22PM +0200, Jakub Hrozek wrote:
+int sss_tool_main(int argc, const char **argv,
struct sss_route_cmd *commands,void *pvt)+{
- struct sss_tool_ctx *tool_ctx;
- uid_t uid;
- int ret;
- uid = getuid();
- if (uid != 0) {
DEBUG(SSSDBG_CRIT_FAILURE, "Running under %d, must be root\n", uid);I think here it should be either root or sssd user. Even better might be to try and gracefully fail if opening the databases fail -- I don't mind which solution you choose.
Please ignore this, of course requiring root for a /tool/ is the right thing to do. Sorry.