From 902710f7956d29ae2c56d5851a4f4ecfb4de164d Mon Sep 17 00:00:00 2001 From: Luke Shumaker Date: Fri, 17 Jun 2016 20:15:28 -0400 Subject: use setuid in the systemd service --- nshd.service.in | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/nshd.service.in b/nshd.service.in index 19427d8..80b83a9 100644 --- a/nshd.service.in +++ b/nshd.service.in @@ -4,7 +4,9 @@ Requires=nshd.socket [Service] Type=notify -ExecStart=@bindir@/nshd +# Use our setuid program instead of setting User= because otherwise it +# would deadlock as it tries to poll the nslcd socket to ask if it +# knows who the user is. It would time out after 1 minute, but that's +# still not good. +ExecStart=@bindir@/setuid @user@ @bindir@/nshd ExecReload=/bin/kill -HUP $MAINPID - -User=@user@ -- cgit v1.2.3