[rrd-developers] [PATCH] Allow rrdached to set the group permissions of the Unix socket for to arbitrary groups

[Tobias Oetiker]

Hi Alex,

Friday Alex Bennee wrote:

> As partially explained in the patch comments my setup is as follows:
>
> * rrdcached running from upstart
>
> This allows upstart to ensure rrdcached is restarted if it ever dies.
> Currently upstart does not offer the facility to run daemons under
> another uid.
>
> * monitor programs also running from upstart
>
> Again to ensure they never die
>
> * Perl CGI scripts running from www-data as part of Apache
>
> These generate graphs on demand. As the RRD graph tool needs to ensure
> data is flushed to the RRD before graph generation occurs it needs to
> communicate to rrdcached socket to do this.
>
> I did consider another approach which was to drop privileges of
> rrdcached after starting. However it seemed to be a more complex
> solution to the problem and likely more fragile.

the patch looks about right to me ... if you throw in a patch for
the documentation too, I'll be glad to integrate it ...

cheers
tobi

>
>

-- 
Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
http://it.oetiker.ch tobi at oetiker.ch ++41 62 775 9902 / sb: -9900