Comment 5 for bug 890362

Revision history for this message
Stuart McLaren (stuart-mclaren) wrote : Re: Should glance user's shell be /bin/false?

I wonder should glance-api/glance-registry also do a 'drop_priviledges' in the same way as swift? This would, for example, allow the daemon to be run without the 'su -c', and allow running on priviledged ports (eg 443).