FS#80141 - [shadowsocks] using User=nobody
Attached to Project:
Arch Linux
Opened by gilcu3 (gilcu3) - Thursday, 02 November 2023, 17:19 GMT
Last edited by Buggy McBugFace (bugbot) - Saturday, 25 November 2023, 20:21 GMT
Opened by gilcu3 (gilcu3) - Thursday, 02 November 2023, 17:19 GMT
Last edited by Buggy McBugFace (bugbot) - Saturday, 25 November 2023, 20:21 GMT
|
Details
Description:
This was an issue reported already for the previos package shadowsocks-libev in Taking the text description from there: I've got a warning reported by systemd reads '[🡕] /usr/lib/systemd/system/shadowsocks-server@.service:8: Special user nobody configured, this is not safe!', which might be the result of 'User=nobody' in all four systemd service files related to this package. Comparing to the current solution, a better choice might employ 'DynamicUser=yes' to replace 'User=nobody', which is considered a better security-related practice. |
This task depends upon
Closed by Buggy McBugFace (bugbot)
Saturday, 25 November 2023, 20:21 GMT
Reason for closing: Moved
Additional comments about closing: https://gitlab.archlinux.org/archlinux/p ackaging/packages/shadowsocks/issues/2
Saturday, 25 November 2023, 20:21 GMT
Reason for closing: Moved
Additional comments about closing: https://gitlab.archlinux.org/archlinux/p ackaging/packages/shadowsocks/issues/2
FS#42487(superseded) here.