dhcpcd-discuss

Specify chrootdir independent of privsep_user's homedir

Ben Woods

Mon Apr 27 07:10:35 2020

Hi Roy,

I think it would be a nice feature to allow the chrootdir to be specified
independently from the privsep_user's home directory.

Implementation ideas:
1. Suggest this could be a configure time variable (e.g.
--chrootdir=/var/chroot/dhcpcd).
2. If --chrootdir=none, then disable chroot (but continue with privsep)
3. If --chrootdir is not specified, fallback to current behaviour - using
the privsep_user's homedir

Reasons:
1. a user's homedir is normally owned by them, however the chrootdir does
not need to be owned by the privsep_user (only $CHROOT/$DBDIR must be owned
by privsep_user).
2. For operating systems that already have a low privileged user for DHCP
client (e.g. _dhcp), this would allow the existing _dhcp user to be used
for dhcpcd, regardless of it's homedir.

Thoughts?

Regards,
Ben

--
From: Benjamin Woods
woodsb02@xxxxxxxxx

Follow-Ups:
Re: Specify chrootdir independent of privsep_user's homedirRoy Marples
Archive administrator: postmaster@marples.name