<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="gmail-"><br>
> In regards to your suggested positions within python code such as the<br>
> client, its worth looking at oslo.privsep [1] where a decorator can be<br>
> used for when needing to setuid.<br>
<br>
</span>hmm yep, have to understand how to use it - its doc is.. well. kind of<br>
sparse. Would be good to get examples.</blockquote><div><br></div><div><br></div><div>Examples you say? Michael Still has been at that recently:</div><div><br></div><div><a href="https://www.madebymikal.com/how-to-make-a-privileged-call-with-oslo-privsep/">https://www.madebymikal.com/how-to-make-a-privileged-call-with-oslo-privsep/</a><br></div><div><a href="https://www.madebymikal.com/adding-oslo-privsep-to-a-new-project-a-worked-example/">https://www.madebymikal.com/adding-oslo-privsep-to-a-new-project-a-worked-example/</a><br></div><div><br></div><div>-- </div><div>MC</div><div><br></div><div><br></div></div></div></div>