Comment 6 for bug 890362
Revision history for this message
| Thierry Carrez (ttx) wrote Re: Should glance user's shell be /bin/false? | #6 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
35a32c5
(Get the code!)
Stuart: actually you want code to run as underprivileged as possible. Here none of glance (or nova) runs as root, which is good. Only the postinst packaging script (and upstart script) do... So maybe keeping /bin/bash as shell is the best trade-off.