runas8
Program to run daemons as non priviledge users
Usage
runas [-c
location]
[uid]
[gid]
[program]
Overview
runas is a small program that allows administrators a generic way to run daemons as non privileged users.
runas is equivalent to using su but it strips off the environment and does not require the target user's shell to be legitimate (that is, listed under /etc/shells)
The main reason of using runas is to avoid having daemons run as the root user, in some cases this might be necessary (like login programs, such as ssh or telnetd that need to switch to the user making the connection) but in many cases it might not be necessary at all. It can be also a good replacement for su, since it prevents attacks to daemons through the use of environment variables. Just change (in your initialisation scripts under /etc/init.d) the line:
su - daemon -c /usr/bin/blah
to:
runas daemon daemongroup /usr/bin/blah
Options
This program just takes two options:
-
-? -
Show summary of options.
-
-c -
Chroot the daemon to a specific location.
Releases
3 releases since Debian 3.1 (Sarge); the text changed 1 time.