{"action":"created","issue":{"url":"https://api.github.com/repos/phusion/passenger/issues/1858","repository_url":"https://api.github.com/repos/phusion/passenger","labels_url":"https://api.github.com/repos/phusion/passenger/issues/1858/labels{/name}","comments_url":"https://api.github.com/repos/phusion/passenger/issues/1858/comments","events_url":"https://api.github.com/repos/phusion/passenger/issues/1858/events","html_url":"https://github.com/phusion/passenger/issues/1858","id":170691128,"number":1858,"title":"--user option demotes watchdog resulting in setOomScore Permission denied error","user":{"login":"majgis","id":546259,"avatar_url":"https://avatars.githubusercontent.com/u/546259?v=3","gravatar_id":"","url":"https://api.github.com/users/majgis","html_url":"https://github.com/majgis","followers_url":"https://api.github.com/users/majgis/followers","following_url":"https://api.github.com/users/majgis/following{/other_user}","gists_url":"https://api.github.com/users/majgis/gists{/gist_id}","starred_url":"https://api.github.com/users/majgis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majgis/subscriptions","organizations_url":"https://api.github.com/users/majgis/orgs","repos_url":"https://api.github.com/users/majgis/repos","events_url":"https://api.github.com/users/majgis/events{/privacy}","received_events_url":"https://api.github.com/users/majgis/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/phusion/passenger/labels/SupportCentral","name":"SupportCentral","color":"fef2c0"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-08-11T16:41:33Z","updated_at":"2016-08-11T16:47:20Z","closed_at":null,"body":"**Setup:**\r\nCentos 6.8\r\nSELinux Disabled\r\nPhusion Passenger Standalone v5.0.29\r\n\r\n```\r\npassenger start \\\r\n  --max-pool-size ${value1} \\\r\n  --min-instances ${value2} \\\r\n  --app-type node \\\r\n  --startup-file ${value3} \\\r\n  --environment ${value4} \\\r\n  --port ${value5} \\\r\n  --daemonize \\\r\n  --user ${APP_USER} \\\r\n  --static-files-dir ${value7} \\\r\n  --log-file ${value8} \\\r\n  --nginx-config-template ${value9}\r\n```\r\n\r\nWith this configuration, the watchdog process is run as ${APP_USER} and results in this error getting repeatedly logged:\r\n\r\n```\r\n[ 2016-08-03 23:24:21.8964 17662/7f503b512700 age/Wat/WatchdogMain.cpp:221 ]: setOomScore(0, 1) failed due to error: Permission denied\r\n```\r\n\r\nRemoving the --user option allows the watchdog to run as root, but the application runs as root as well.\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/phusion/passenger/issues/comments/239219727","html_url":"https://github.com/phusion/passenger/issues/1858#issuecomment-239219727","issue_url":"https://api.github.com/repos/phusion/passenger/issues/1858","id":239219727,"user":{"login":"CamJN","id":6243207,"avatar_url":"https://avatars.githubusercontent.com/u/6243207?v=3","gravatar_id":"","url":"https://api.github.com/users/CamJN","html_url":"https://github.com/CamJN","followers_url":"https://api.github.com/users/CamJN/followers","following_url":"https://api.github.com/users/CamJN/following{/other_user}","gists_url":"https://api.github.com/users/CamJN/gists{/gist_id}","starred_url":"https://api.github.com/users/CamJN/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CamJN/subscriptions","organizations_url":"https://api.github.com/users/CamJN/orgs","repos_url":"https://api.github.com/users/CamJN/repos","events_url":"https://api.github.com/users/CamJN/events{/privacy}","received_events_url":"https://api.github.com/users/CamJN/received_events","type":"User","site_admin":false},"created_at":"2016-08-11T16:47:20Z","updated_at":"2016-08-11T16:47:20Z","body":"The Watchdog should perform any tasks that require root before dropping privileges, so this is a bug, but there shouldn't be any other implications."}}
{"actor":{"display_login":"CamJN"}}