[asterisk-users] Running as non-root

[Torbjörn Abrahamsson]

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Tzafrir Cohen
Sent: den 23 oktober 2011 21:19
To: asterisk-users at lists.digium.com
Subject: Re: [asterisk-users] Running as non-root

> On Thu, Oct 20, 2011 at 09:02:14AM +0200, Torbjörn Abrahamsson wrote:
> > Thanks for all answers. 
> > 
> > One further question: If I run Asterisk as root, and set its group in
> > asterisk.conf to apache, and make no changes to file/folder permissions,
> > will I be able to run "asterisk -rx 'clicmd'" from a php-script (running
as
> > user apache with group apache)?
>
> 1. Why would you want to run Asterisk as root?

I wouldn't. But if my efforts to run asterisk as non root would hit a snag
permission wise, this might be something I would consider.

> 2. Why set the group to apache (if you're root anyway why do you care)?

It is not asterisk's permission to do things I am worried about. I want
Apache to be able to issue asterisk cli-commands, like a reload after
something crucial has changed in the web config. I am trying to ascertain if
setting asterisk to run as group apache will be sufficient (actually
regardless if asterisk runs as root or not), or if I still need to change
permissions of files. In an other installation (this one made from RPMs, so
non-root has been taken care of already) we have set apache to run as the
same user as asterisk. 

> 3. If asterisk.ctl has the proper permissions, other users may issue
>   some CLI commands, see cli_permissions.conf .

Will look at this, thanks!

BR,
Torbjörn Abrahamsson