Re: [Freeswitch-docs] Freeswitch binary user and group
Choosing the daemon group made sense to me, but if others know a better group by all means change it. I discovered that FS must be started as root, then it quickly drops privileges. As to file owner and group, I’m not so sure. It’s probably best to carry out this discussion on the FS-docs mailing list where others can see it. Bote From: Niek Vlessert [mailto:niekvlessert@gmail.com] Sent: Thursday, 01 October, 2015 07:01 To: Bote Man Subject: Freeswitch user and group Hello Bote, On the Freeswitch Confluence you are the one who changed the 1.6 installation page adding this: Because you most likely built FreeSWITCH™ as root you must now create the user 'freeswitch' in group 'daemon' and change the FS files to owner = freeswitch and group = daemon (to allow system services to interact with FS) and set the file mode appropriately I'm building some things to make it easier for people to get Freeswitch running after make install (Jira FS-7910 if you're interested). Now there is some discussion if the daemon group is the correct one or the freeswitch group. Could you shed some light on 'allow system services to interact with FS'? Thanks in advance, regards, Niek
why docs and not the users list? The current package installer sets up the freeswitch group. I think it's quite alright to have it like this. On Thu, Oct 1, 2015 at 5:00 PM, Bote Man <bote_radio@botecomm.com> wrote:
Choosing the daemon group made sense to me, but if others know a better group by all means change it.
I discovered that FS must be started as root, then it quickly drops privileges. As to file owner and group, I’m not so sure.
It’s probably best to carry out this discussion on the FS-docs mailing list where others can see it.
Bote
From: Niek Vlessert [mailto:niekvlessert@gmail.com] Sent: Thursday, 01 October, 2015 07:01 To: Bote Man Subject: Freeswitch user and group
Hello Bote,
On the Freeswitch Confluence you are the one who changed the 1.6 installation page adding this:
Because you most likely built FreeSWITCH™ as root you must now create the user 'freeswitch' in group 'daemon' and change the FS files to owner = freeswitch and group = daemon (to allow system services to interact with FS) and set the file mode appropriately
I'm building some things to make it easier for people to get Freeswitch running after make install (Jira FS-7910 if you're interested). Now there is some discussion if the daemon group is the correct one or the freeswitch group. Could you shed some light on 'allow system services to interact with FS'?
Thanks in advance, regards,
Niek
_______________________________________________ Freeswitch-docs mailing list Freeswitch-docs@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs
This discussion concerns the documentation for building FreeSWITCH from source. The packages take care of themselves. I wrote the part instructing users to chown freeswitch:daemon If it's better to chown freeswitch:freeswitch then by all means change it, but then the group 'freeswitch' must be created, where 'daemon' already exists as one of the system groups. I do not have the expertise to know which is the best choice, so I rely on those more knowledgeable than I. Thanks. Bote
-----Original Message----- From: Stanislav Sinyagin Sent: Thursday, 01 October, 2015 11:53 To: FreeSWITCH Docs Team Cc: Niek Vlessert Subject: Re: [Freeswitch-docs] Freeswitch binary user and group
why docs and not the users list?
The current package installer sets up the freeswitch group. I think it's quite alright to have it like this.
On Thu, Oct 1, 2015 at 5:00 PM, Bote Man <bote_radio@botecomm.com> wrote:
Choosing the daemon group made sense to me, but if others know a better group by all means change it.
I discovered that FS must be started as root, then it quickly drops privileges. As to file owner and group, I’m not so sure.
It’s probably best to carry out this discussion on the FS-docs mailing list where others can see it.
Bote
From: Niek Vlessert [mailto:niekvlessert@gmail.com] Sent: Thursday, 01 October, 2015 07:01 To: Bote Man Subject: Freeswitch user and group
Hello Bote,
On the Freeswitch Confluence you are the one who changed the 1.6 installation page adding this:
Because you most likely built FreeSWITCH™ as root you must now create the user 'freeswitch' in group 'daemon' and change the FS files to owner = freeswitch and group = daemon (to allow system services to interact with FS) and set the file mode appropriately
I'm building some things to make it easier for people to get Freeswitch running after make install (Jira FS-7910 if you're interested). Now there is some discussion if the daemon group is the correct one or the freeswitch group. Could you shed some light on 'allow system services to interact with FS'?
Thanks in advance, regards,
Niek
_______________________________________________ Freeswitch-docs mailing list Freeswitch-docs@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs
_______________________________________________ Freeswitch-docs mailing list Freeswitch-docs@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs
Ok, I updated confluence. BTW, the systemd unit files on Confluence already used group Freeswitch. Op do 1 okt. 2015 om 18:09 schreef Bote Man <bote_radio@botecomm.com>:
This discussion concerns the documentation for building FreeSWITCH from source. The packages take care of themselves.
I wrote the part instructing users to chown freeswitch:daemon
If it's better to chown freeswitch:freeswitch then by all means change it, but then the group 'freeswitch' must be created, where 'daemon' already exists as one of the system groups.
I do not have the expertise to know which is the best choice, so I rely on those more knowledgeable than I.
Thanks.
Bote
-----Original Message----- From: Stanislav Sinyagin Sent: Thursday, 01 October, 2015 11:53 To: FreeSWITCH Docs Team Cc: Niek Vlessert Subject: Re: [Freeswitch-docs] Freeswitch binary user and group
why docs and not the users list?
The current package installer sets up the freeswitch group. I think it's quite alright to have it like this.
On Thu, Oct 1, 2015 at 5:00 PM, Bote Man <bote_radio@botecomm.com> wrote:
Choosing the daemon group made sense to me, but if others know a better group by all means change it.
I discovered that FS must be started as root, then it quickly drops privileges. As to file owner and group, I’m not so sure.
It’s probably best to carry out this discussion on the FS-docs mailing list where others can see it.
Bote
From: Niek Vlessert [mailto:niekvlessert@gmail.com] Sent: Thursday, 01 October, 2015 07:01 To: Bote Man Subject: Freeswitch user and group
Hello Bote,
On the Freeswitch Confluence you are the one who changed the 1.6 installation page adding this:
Because you most likely built FreeSWITCH™ as root you must now create the user 'freeswitch' in group 'daemon' and change the FS files to owner = freeswitch and group = daemon (to allow system services to interact with FS) and set the file mode appropriately
I'm building some things to make it easier for people to get Freeswitch running after make install (Jira FS-7910 if you're interested). Now there is some discussion if the daemon group is the correct one or the freeswitch group. Could you shed some light on 'allow system services to interact with FS'?
Thanks in advance, regards,
Niek
_______________________________________________ Freeswitch-docs mailing list Freeswitch-docs@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs
_______________________________________________ Freeswitch-docs mailing list Freeswitch-docs@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs
I my instalation FS runs as non privileged user without problems. Think root privileges recommendadion is specific for you. On Thu, Oct 1, 2015, 18:01 Bote Man <bote_radio@botecomm.com> wrote:
Choosing the daemon group made sense to me, but if others know a better group by all means change it.
I discovered that FS must be started as root, then it quickly drops privileges. As to file owner and group, I’m not so sure.
It’s probably best to carry out this discussion on the FS-docs mailing list where others can see it.
Bote
*From:* Niek Vlessert [mailto:niekvlessert@gmail.com] *Sent:* Thursday, 01 October, 2015 07:01 *To:* Bote Man *Subject:* Freeswitch user and group
Hello Bote,
On the Freeswitch Confluence you are the one who changed the 1.6 installation page adding this:
Because you most likely built FreeSWITCH™ as root you must now create the user 'freeswitch' in group 'daemon' and change the FS files to owner = freeswitch and group = daemon (to allow system services to interact with FS) and set the file mode appropriately
I'm building some things to make it easier for people to get Freeswitch running after make install (Jira FS-7910 if you're interested). Now there is some discussion if the daemon group is the correct one or the freeswitch group. Could you shed some light on 'allow system services to interact with FS'?
Thanks in advance, regards,
Niek _______________________________________________ Freeswitch-docs mailing list Freeswitch-docs@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs
anthm corrected me when I was updating the docs a few weeks ago: start FS as root, it does necessary privileged actions, then drops privileges to the user and group specified on the FS command line, as specified currently in Confluence. https://freeswitch.org/confluence/display/FREESWITCH/FreeSWITCH+1.6+Video#Fr... If you run ‘top’ you will find that FS is running at a very low nice level and lower priority level. Starting FS as root allows it to establish the proper priority level before dropping privs. This affects high volume installations, but you might not notice it on low call volume instances. Bote From: Sergey Safarov Sent: Thursday, 01 October, 2015 12:05 Subject: Re: [Freeswitch-docs] Freeswitch binary user and group I my instalation FS runs as non privileged user without problems. Think root privileges recommendadion is specific for you. On Thu, Oct 1, 2015, 18:01 Bote Man <bote_radio@botecomm.com> wrote: Choosing the daemon group made sense to me, but if others know a better group by all means change it. I discovered that FS must be started as root, then it quickly drops privileges. As to file owner and group, I’m not so sure. It’s probably best to carry out this discussion on the FS-docs mailing list where others can see it. Bote From: Niek Vlessert [mailto:niekvlessert@gmail.com] Sent: Thursday, 01 October, 2015 07:01 To: Bote Man Subject: Freeswitch user and group Hello Bote, On the Freeswitch Confluence you are the one who changed the 1.6 installation page adding this: Because you most likely built FreeSWITCH™ as root you must now create the user 'freeswitch' in group 'daemon' and change the FS files to owner = freeswitch and group = daemon (to allow system services to interact with FS) and set the file mode appropriately I'm building some things to make it easier for people to get Freeswitch running after make install (Jira FS-7910 if you're interested). Now there is some discussion if the daemon group is the correct one or the freeswitch group. Could you shed some light on 'allow system services to interact with FS'? Thanks in advance, regards, Niek _______________________________________________ Freeswitch-docs mailing list Freeswitch-docs@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs
participants (4)
-
Bote Man
-
Niek Vlessert
-
Sergey Safarov
-
Stanislav Sinyagin