From: Thomas Adam <thomas@xteddy.org>
Subject: Re: more privdrop in -portable gotd
To: gameoftrees@openbsd.org
Date: Sat, 13 Apr 2024 17:34:32 +0100

On Sat, 13 Apr 2024 at 10:41, Stefan Sperling <stsp@stsp.name> wrote:

> I do not see a reason for gotd components other than the main process
> to keep running as root in -portable:
>
>   auth (reads the user database)
>   session_read/write (should use the same level of priv as repo_read/write)
>   notify (sends e-mail or http requests)
>
> It seems the automated gotd tests are not yet enabled in -portable.
> Diff works for me in simple manual testing.
> I have not tested notifications but I don't see why they would break.
>
> OK?


Hi,

Yes. Looks good to me.

Kindly,
Thomas