[Freeswitch-docs] Freeswitch binary user and group

[Bote Man]

anthm corrected me when I was updating the docs a few weeks ago: start FS as root, it does necessary privileged actions, then drops privileges to the user and group specified on the FS command line, as specified currently in Confluence.

 

https://freeswitch.org/confluence/display/FREESWITCH/FreeSWITCH+1.6+Video#FreeSWITCH1.6Video-GetFreeSWITCH

 

If you run ‘top’ you will find that FS is running at a very low nice level and lower priority level. Starting FS as root allows it to establish the proper priority level before dropping privs. This affects high volume installations, but you might not notice it on low call volume instances.

 

Bote

 

 

 

From: Sergey Safarov
Sent: Thursday, 01 October, 2015 12:05
Subject: Re: [Freeswitch-docs] Freeswitch binary user and group

 

I my instalation FS runs as non privileged user without problems. Think root privileges recommendadion is specific for you.

 

On Thu, Oct 1, 2015, 18:01 Bote Man <bote_radio at botecomm.com> wrote:

Choosing the daemon group made sense to me, but if others know a better group by all means change it.

 

I discovered that FS must be started as root, then it quickly drops privileges. As to file owner and group, I’m not so sure.

 

It’s probably best to carry out this discussion on the FS-docs mailing list where others can see it.

 

Bote

 

 

From: Niek Vlessert [mailto:niekvlessert at gmail.com] 
Sent: Thursday, 01 October, 2015 07:01
To: Bote Man
Subject: Freeswitch user and group

 

Hello Bote,

 

On the Freeswitch Confluence you are the one who changed the 1.6 installation page adding this:

 

Because you most likely built FreeSWITCH™ as root you must now create the user 'freeswitch' in group 'daemon' and change the FS files to owner = freeswitch and group = daemon (to allow system services to interact with FS) and set the file mode appropriately

 

I'm building some things to make it easier for people to get Freeswitch running after make install (Jira FS-7910 if you're interested). Now there is some discussion if the daemon group is the correct one or the freeswitch group. Could you shed some light on 'allow system services to interact with FS'?

 

Thanks in advance, regards,

 

Niek

_______________________________________________
Freeswitch-docs mailing list
Freeswitch-docs at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-docs/attachments/20151001/4955e1ae/attachment-0001.html