The File etc Dahdi system conf is not owned by asterisk Just default Asterisk is configured to automatically function as origin, in other words, that the superuser. So, these pages are all about why it isn’t just a great thought and just how exactly to put this as much as behaving as a user.
Overview: File etc dahdi system conf is not owned by asterisk
Could Asterisk operate as a non-root?
Hence, yes but it takes just a tiny tweaking.
Why can this be of use?
Therefore, if Asterisk comes with a remote stability compromise, then this must not be utilized that software to shoot and control the whole carton. Preferably the hack needs don’t even let monitoring of these config data files (potential for those who don’t edit them via the games console ).
Distro Offers
I mounted Asterisk out of the distro bundle. Are any tweaks essential?
Business service phone provider offers (at the time of Sarge) and Ubuntu packs (at the least of 5 10 ( not sure) will function as non-root and won’t require some shifts.
FreeBSD vents operate as the origin. Maybe not confident about SuSE bundles, Fedora-Extra bundles, Mandrake-control bundles, DAG packs, or whatever else.
Fedora
ATrpms Retailer: Installs as consumer asterisk, category =asterisk but may neglect to Get Started with the mistake, “not able to get /var/log/asterisk/messages.”
SELinux induces issues. To disable SELinux switch in /etc/SELinux/config SE LINUX empowered to handicapped or permissive
Quick-start
No-frills Guide to Asterisk 1.4. Decision (RedHat flavour) on 1 9 May 2008
/etc/init. D/asterisk halt
> Shutting down Asterisk: okay
——————————-
Therefore, it’s preferable to specify an individual referred to as Asterisk in the category asterisk
if you don’t would like to produce more alterations to two data files, i.e. capital. rules, etc/init. d/asterisk
/usr/bin/group add an asterisk
[+]
/ / usr/bin/user add -p /var/lib/asterisk -gram asterisk asterisk
P user adds a caution: that the directory exists.
> Perhaps Not copying any file from skel directory to it.
———————————-
Chown –recursive asterisk: asterisk/asterisk var/lib/asterisk
Chown –recursive Asterisk: Asterisk dev/zap
If You’re conducting DAHDI operate another line of files etc. Dahdi system conf is not owned by Asterisk
Chown –recursive Asterisk: Asterisk dev/dahdi
[+]
If You’re utilizing DAHDI operate another line
[+]
Chown –recursive origin: asterisk/asterisk etc/asterisk
[+]
Cp / / etc/asterisk/asterisk. Conf / / etc/asterisk/asterisk. conf.org
Conf
Transform the Next Line
astrundir => /var/run
into
astrundir =p & var/run/asterisk
——————————–
Consumer Account
Take advantage of one’s body’s favourite way of introducing a fresh brand to consumers. Cases:
So, be aware that the latest Debian bundles try this on you, for example, Chown and Child.
Thus, only take good care never to start Asterisk as origin unwittingly without having’-U’.
Operate Directory File etc Dahdi System Conf is Not Owned By Asterisk
This listing is currently useful for any range of temporary files. Asterisk should have the ability to compose those data files into a solution. The default option was var/run, which ought to exist on approaches.
To Look at the present built-in default:
Strings /usr/bin/asterisk | grep / / var/run File etc dahdi system conf is not owned by asterisk
Additionally, observe that at Ubuntu (and other distributions) / / var/run is washed in a startup, and thus /var/run/asterisk has to be generated and Chown from the Asterisk in its script.
File etc Dahdi System Conf is Not Owned by Asterisk <=1.2
Makefile and alter the Meaning of ASTVARRUNDIR such as that:
ASTVAR RUN DIR (INSTALL_PREFIX)/ / var/run/asterisk
Watch Compiling Asterisk for information on the Procedure.
Asterisk wants to write permission for those records and their contents:
The data files from the var/spool/asterisk/incoming directory have to become possessed by the asterisk consumer in addition to writable. Writable due to the fact asterisk appends traces to signify re-try standing. The owner, therefore, may place the time. Covered beneath.
Hence, you might receive a dreadful message as”Asterisk ended with exit status inch” when seeking to start Asterisk.
You may also look at that the permissions of their VoIP CGI files/directory. In addition, data files and apparatus. It also can need to get a substitute. Based on your specific installation.
Chown File etc Dahdi System Conf is Not Owned by Asterisk
However, your supply’s variant of capitals needs to install this correctly, see outside for host card init/setup scripts that populate the supply defaults. So, watch devcapi20 Eicon permissions to get a suggested issue. Remedy for Ubuntu/Debian techniques.
Therefore, in case you are utilizing Music On Hold using mpg123, then you’ll Probably Have to place the suid bit about the executable such as that:
Chmod u+s usr/local/bin/ / mpg123
This permits mpg123 to conduct as origin even though Asterisk is functioning since being a non-root consumer.
Thus, remember that mpg123 has any understood security problems. So, tend not to utilize it to engage in random Asterisk
Therefore, Starting up, Asterisk is coating everywhere. But as soon as You’ve Completed the Adjustments above, you can Make Certain asterisk works as a consumer asterisk and set Asterisk by devoting this command to your startup programs:
Troubleshooting
Do issues get a hire to do the job?
Just as root executes this control:
So, alter the possession and permissions of these offenders and take them to File, etc. Dahdi system conf is not owned by Asterisk yet again.
Therefore, in the event, you will be employing. The solution -de (real-time concern ) into Asterisk.
Asterisk has to implement as the origin. If it afterwards drops the origin privileges. (utilizing -U). So you shouldn’t
Utilize’su asterisk’ to conduct safe_asterisk. Whoever uses safe_asterisk using -de, make sure you mend this. see also recruitment.
In Additional, just take good care never to conduct Asterisk devoid of -U asterisk. So, you may well entice to get this done for debugging. The Debian Offer (at Xorcom Speedy as well as at present Etch ) includes /etc/init. D/Asterisk
debug for it.
My Country Mobile is also Specialized in different products like SIP Trunking, Call Center Solutions, and Cloud Contact Centers.
My Country Mobile offers the best USA virtual phone number around the world. Check out the 301 area code, 260 area code, 774 area code, and many more. se also Fresno Unified Jobs
