From 829cf01e32c11e707c2177398c840c448e0ec5c1 Mon Sep 17 00:00:00 2001
From: "Peter A. Bigot" <pab@pabigot.com>
Date: Sat, 31 May 2014 19:42:41 -0500
Subject: [PATCH] rrdcached-lsb: update to support unprivileged group/user
 configuration

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
---
 etc/rrdcached-default-lsb.in | 8 ++++++++
 etc/rrdcached-init-lsb       | 2 ++
 2 files changed, 10 insertions(+)

diff --git a/etc/rrdcached-default-lsb.in b/etc/rrdcached-default-lsb.in
index 44e163d1..0ed8e03b 100644
--- a/etc/rrdcached-default-lsb.in
+++ b/etc/rrdcached-default-lsb.in
@@ -34,6 +34,14 @@ SOCKFILE=/var/run/rrdcached.sock
 # Optional override access mode of local control socket.
 #SOCKMODE=0660
 
+# Optional unprivileged group to run under when daemon.  If unset
+# retains invocation group privileges.
+#DAEMON_GROUP=_rrdcached
+
+# Optional unprivileged user to run under when daemon.  If unset
+# retains invocation user privileges.
+#DAEMON_USER=_rrdcached
+
 # Network socket address requests.  Use in conjunction with SOCKFILE to
 # also listen on INET domain sockets.  The option is a lower-case ell
 # ASCII 108 = 0x6c, and should be repeated for each address.  The
diff --git a/etc/rrdcached-init-lsb b/etc/rrdcached-init-lsb
index b7f4d694..88bb274f 100755
--- a/etc/rrdcached-init-lsb
+++ b/etc/rrdcached-init-lsb
@@ -30,6 +30,8 @@ RRDCACHED_OPTIONS="\
   ${WRITE_THREADS:+-t ${WRITE_THREADS}} \
   ${BASE_PATH:+-b ${BASE_PATH}} \
   ${JOURNAL_PATH:+-j ${JOURNAL_PATH}} \
+  ${DAEMON_GROUP:+-G ${DAEMON_GROUP}} \
+  ${DAEMON_USER:+-U ${DAEMON_USER}} \
   -p ${PIDFILE} \
   ${SOCKFILE:+${SOCKGROUP:+-s ${SOCKGROUP}} ${SOCKMODE:+-m ${SOCKMODE}} -l unix:${SOCKFILE}} \
     "
-- 
2.47.2