Bug 360773

Summary:	net-dns/dnsmasq: run as dedicated user instead of nobody
Product:	Gentoo Linux	Reporter:	Paweł Hajdan, Jr. (RETIRED) <phajdan.jr>
Component:	[OLD] Server	Assignee:	Patrick McLean <chutzpah>
Status:	RESOLVED FIXED
Severity:	enhancement
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	patch

Description Paweł Hajdan, Jr. (RETIRED) gentoo-dev

2011-03-27 13:37:37 UTC

Currently dnsmasq will run as nobody as default.

I'd like to suggest an enhancement to create a dedicated dnsmasq user and
group and make the daemon run as that user and group instead of
nobody for better isolation.

What do you think? I can submit patches to make it work that way, just asking
for an opinion first.

Comment 1 Patrick McLean gentoo-dev

2011-03-29 17:19:30 UTC

Hi,

Sorry for the delay in responding to this. If people feel it would be helpful, I can certainly do it. I would have no problem taking patches, or I can do it myself when I get some free time.

Comment 2 Paweł Hajdan, Jr. (RETIRED) gentoo-dev

2011-04-03 16:36:08 UTC

Created attachment 268361 [details, diff]
patch

Comment 3 Paweł Hajdan, Jr. (RETIRED) gentoo-dev

2011-05-22 10:08:38 UTC

I made the change in the tree. I used pkg_setup to add the user, and added a new conf.d file so that older ebuilds are not affected.