FS#80141 - [shadowsocks] using User=nobody

Attached to Project: Arch Linux
Opened by gilcu3 (gilcu3) - Thursday, 02 November 2023, 17:19 GMT
Last edited by Buggy McBugFace (bugbot) - Saturday, 25 November 2023, 20:21 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Felix Yan (felixonmars)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:
This was an issue reported already for the previos package shadowsocks-libev in  FS#71925 
Taking the text description from there:
I've got a warning reported by systemd reads '[🡕] /usr/lib/systemd/system/shadowsocks-server@.service:8: Special user nobody configured, this is not safe!', which might be the result of 'User=nobody' in all four systemd service files related to this package. Comparing to the current solution, a better choice might employ 'DynamicUser=yes' to replace 'User=nobody', which is considered a better security-related practice.
This task depends upon

Closed by  Buggy McBugFace (bugbot)
Saturday, 25 November 2023, 20:21 GMT
Reason for closing:  Moved
Additional comments about closing:  https://gitlab.archlinux.org/archlinux/p ackaging/packages/shadowsocks/issues/2
Comment by Toolybird (Toolybird) - Thursday, 02 November 2023, 19:52 GMT
Merging  FS#42487  (superseded) here.

Loading...