[rrd-developers] [PATCH] Allow rrdached to set the group permissions of the Unix socket for to arbitrary groups

[Alex Bennee]

As partially explained in the patch comments my setup is as follows:

* rrdcached running from upstart

This allows upstart to ensure rrdcached is restarted if it ever dies.
Currently upstart does not offer the facility to run daemons under
another uid.

* monitor programs also running from upstart

Again to ensure they never die

* Perl CGI scripts running from www-data as part of Apache

These generate graphs on demand. As the RRD graph tool needs to ensure
data is flushed to the RRD before graph generation occurs it needs to
communicate to rrdcached socket to do this.

I did consider another approach which was to drop privileges of
rrdcached after starting. However it seemed to be a more complex
solution to the problem and likely more fragile.

-- 
Alex, homepage: http://www.bennee.com/~alex/
http://www.half-llama.co.uk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Allow-rrdached-to-set-the-group-permissions-of-the-U.patch
Type: text/x-patch
Size: 3472 bytes
Desc: not available
Url : http://lists.oetiker.ch/pipermail/rrd-developers/attachments/20100122/3864bd49/attachment.bin