FS#71925 - [shadowsocks-libev] Employ DynamicUser=yes instead of User=nobody
Attached to Project:
Community Packages
Opened by Tommy Zhang (T-J-M) - Thursday, 26 August 2021, 07:09 GMT
Last edited by Toolybird (Toolybird) - Sunday, 14 May 2023, 02:23 GMT
Opened by Tommy Zhang (T-J-M) - Thursday, 26 August 2021, 07:09 GMT
Last edited by Toolybird (Toolybird) - Sunday, 14 May 2023, 02:23 GMT
|
Details
Description:
I've got a warning reported by systemd reads '[🡕] /usr/lib/systemd/system/shadowsocks-libev@.service:8: Special user nobody configured, this is not safe!', which might be the result of 'User=nobody' in all four systemd service files related to this package. Comparing to the current solution, a better choice might employ 'DynamicUser=yes' to replace 'User=nobody', which is considered a better security-related practice. |
This task depends upon
Closed by  Toolybird (Toolybird)
Sunday, 14 May 2023, 02:23 GMT
Reason for closing: Â Won't fix
Additional comments about closing: Â No longer in the repos.
Sunday, 14 May 2023, 02:23 GMT
Reason for closing: Â Won't fix
Additional comments about closing: Â No longer in the repos.
Comment by Tommy Zhang (T-J-M) -
Thursday, 26 August 2021, 07:12 GMT
Comment by Tommy Zhang (T-J-M) -
Thursday, 26 August 2021, 07:15 GMT
Comment by Tommy Zhang (T-J-M) -
Tuesday, 31 August 2021, 10:29 GMT
Comment by Tommy Zhang (T-J-M) -
Sunday, 05 June 2022, 03:28 GMT
P.S. I'm not an expert on how Arch's bug tracking system works. If
this task is unfortunately lost from the corresponding package
name, I would suggest it shadowsocks-libev with version 3.3.5-3,
currently maintained by felixonmars(Felix Yan).
Link to the corresponding package:
https://archlinux.org/packages/community/x86_64/shadowsocks-libev/
A patch to fix this issue has been generated and attached to this
comment.
As of 05 June 2022, this problem still exists.