On Debian, rsyslog runs by default as root (due to POSIX compatibility). It can drop privileges after start, but a cleaner way would be to start as a non-privileged user. Could somebody please advise, what would be a clean way to set up rsyslog to run as non-privileged user? (which user?). While googling, I found start-stop-daemon, which apparently can make daemon start as non-root. is this the way to do it, or is there a better way?
Starting with 4.1.1,
Please note that due to
If you do not need this functionality, you can start
All this is from the rsyslog wiki
You should read it.
|show 4 more comments|
On my system (Debian), rsyslog is started by /etc/init.d/rsyslog, which contains something like this:
according to start-stop-daemon manual, I can specify the "--chuid" option, which will make the process start as another user.
so, the only question remaining is, what would be a good practice. Which user should I use? This user will have write access to my /var/log/