[Home]

Summary:ASTERISK-16182: [patch] [branch] unprivileged (non-root) installation of Asterisk
Reporter:Paul Belanger (pabelanger)Labels:
Date Opened:2010-06-01 09:05:43Date Closed:2011-06-07 14:00:40
Priority:MajorRegression?No
Status:Closed/CompleteComponents:Core/BuildSystem
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:( 0) non-root.patch.v8
Description:There have been many request over the years for Asterisk to be install as a non-root user. The follow patch set enables this.

By default, Asterisk will now attempt to install using the 'Asterisk' user id / group id.  This means, the user and group MUST already exist, Asterisk will not create them (This may change at a future date).

Below are 3 flags to change theses settings.
---
3 new configure options:
 --with-user=uid
 --with-group=gid
 --disable-non-root
---


****** ADDITIONAL INFORMATION ******

Most of the work is already done.  We just need testers to verify everything works properly.

http://svn.asterisk.org/svn/asterisk/team/pabelanger/non-root/
Comments:By: Paul Belanger (pabelanger) 2010-06-15 13:03:03

So I don't forget.
---
<Corydon76-dig> pabelanger: what does "non-root install" mean to you?
<pabelanger> Corydon76-dig: non-privileged user would be term.... for both running Asterisk and Testsuite.
<Corydon76-dig> pabelanger: so you're not running any of the flags or features that need privileged capabilities?
<Corydon76-dig> i.e. -p or setting TOS bits
<pabelanger> Corydon76-dig: at the moment, no.  However handling that would need to be considered
<Corydon76-dig> Not that we currently test either of those, but if we ever did, then we could not use this for those tests
<pabelanger> Corydon76-dig: In fact, it would be a good idea for me to figure out any / all settings in Asterisk that would require privileged capabilities.
<Corydon76-dig> pabelanger: I believe those are it, for the moment

By: Digium Subversion (svnbot) 2010-07-23 08:26:41

Repository: asterisk
Revision: 278873

U   trunk/Makefile
U   trunk/agi/Makefile
U   trunk/sounds/Makefile

------------------------------------------------------------------------
r278873 | pabelanger | 2010-07-23 08:26:40 -0500 (Fri, 23 Jul 2010) | 17 lines

Portability updates for Makefiles.

When possible, use $(INSTALL).  This allows us to use the functionality within
install for setting directory / file permissions, a requirement for unprivileged
installation.

Also move any directory we plan to create within the installdirs macro. Plus
various other formatting issues.

(issue ASTERISK-16182)
Reported by: pabelanger
Patches:
     non-root.patch.v8 uploaded by pabelanger (license 224)
Tested by: pabelanger

Review: https://reviewboard.asterisk.org/r/654/

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=278873

By: Paul Belanger (pabelanger) 2010-07-23 15:10:58

Suspended