FS#25813 - [minidlna] daemon runs as root

Attached to Project: Community Packages
Opened by Seth VanHeulen (svanheulen) - Monday, 29 August 2011, 18:03 GMT
Last edited by Sergej Pupykin (sergej) - Monday, 20 October 2014, 10:10 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sergej Pupykin (sergej)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The minidlna daemon runs as root by default, which seems like a security risk.

Additional info:
* community/minidlna 1.0.22-2
* Included is a patch for the rc.d script to run it as the nobody user.


Steps to reproduce:
Start the minidlna daemon.
   minidlna.patch (0.3 KiB)
This task depends upon

Closed by  Sergej Pupykin (sergej)
Monday, 20 October 2014, 10:10 GMT
Reason for closing:  Fixed
Additional comments about closing:  added user=nobody to /etc/minidlna.conf
Comment by Willem (willemw) - Sunday, 19 October 2014, 13:49 GMT
  • Field changed: Percent Complete (100% → 0%)
Minidlnad runs by default as root again.

It is a security risk. It can cause file permission issues. Documentation states that minidlnad runs as nobody by default.

Loading...