Josip Rodin wrote:
With regard to log rotation, that's actually contrary to what it should do :) The HUP not only reopens log files, but it also reopens the configuration. But if you have a configuration file that the unprivileged FR user can't read, esp. if it's radiusd.conf :) the reload will fail, and it also won't be able to reopen log files.
The fix there is to *not* reload the config if it's done an suid.
IOW for the purpose of log rotation, we didn't need HUP because it's too invasive for that purpose. But a configuration reload in general is useful and HUP seems like the most appropriate method.
Another fix would be to add a "radmin" command to re-open just the log files. Either patch is small, and both would be useful. Alan DeKok.