[Fwd: games user and group]

[Michael Thomas]

Michael Schwendt wrote:
> On Tue, 28 Feb 2006 16:47:27 -0800, Michael Thomas wrote:
> 
> 
>>Daemon processes
>>================
>>Some games such as wesnoth and xpilot-ng come with server daemons.  I
>>see three choices for the owner of these daemon processes:
>>
>>1) root (ick!)
>>2) Allocate a separate '<gamename>' user for each package/daemon
>>3) Piggyback on the 'games' user
>>
>>My preference would be #3.  Are there any drawbacks to reusing the
>>'games' user to run various game daemons?
> 
> 
> Do you like to predict for the future that game no.1 should be able
> to access files and directories from game no.2 and vice versa without
> any security risks?

Good point.  But couldn't that be worked around with selinux policies?

--Mike


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3820 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-extras-list/attachments/20060301/b18adec8/attachment.bin>