[rrd-developers] [PATCH] Allow rrdached to set the group permissions of the Unix socket for to arbitrary groups

Tobias Oetiker tobi at oetiker.ch
Mon Jan 25 21:33:13 CET 2010

Hi Alex,

Friday Alex Bennee wrote:

> As partially explained in the patch comments my setup is as follows:
> * rrdcached running from upstart
> This allows upstart to ensure rrdcached is restarted if it ever dies.
> Currently upstart does not offer the facility to run daemons under
> another uid.
> * monitor programs also running from upstart
> Again to ensure they never die
> * Perl CGI scripts running from www-data as part of Apache
> These generate graphs on demand. As the RRD graph tool needs to ensure
> data is flushed to the RRD before graph generation occurs it needs to
> communicate to rrdcached socket to do this.
> I did consider another approach which was to drop privileges of
> rrdcached after starting. However it seemed to be a more complex
> solution to the problem and likely more fragile.

the patch looks about right to me ... if you throw in a patch for
the documentation too, I'll be glad to integrate it ...



Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
http://it.oetiker.ch tobi at oetiker.ch ++41 62 775 9902 / sb: -9900

More information about the rrd-developers mailing list