[Bug 178922] Review Request: asterisk - The Open Source PBX

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: asterisk - The Open Source PBX


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178922





------- Additional Comments From matthias at rpmforge.net  2007-05-17 03:50 EST -------
What about this point from comment #17?

> - Asterisk shouldn't run as root by default IMHO. If it's a QoS related
>   decision, it should be up to the user/admin to switch to using root.

I've checked the 1.4.4 packages, and asterisk still defaults to running as root.
While looking at this, I also noticed that the init script includes a commented
out configuration section even though it supports setting all the options by
creating an /etc/sysconfig/asterisk file. Since no configuration changes should
be made inside the init script itself (this is now a policy), I'd suggest :
- Installing a default /etc/sysconfig/asterisk file
- Moving the "configuration" section from the init script to that file

Also, unless it's absolutely impossible to run asterisk as non-root (which I
doubt, since all my installs run as the asterisk user), I'd suggest having the
/etc/sysconfig/asterisk file default to switching to the asterisk user and
group, with a comment saying that by commenting out the entries, asterisk would
run as root, that it might be useful in some setups, but that it also involves a
higher risk.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.