Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 360177 - net-proxy/dansguardian: run as dedicated user instead of nobody
Summary: net-proxy/dansguardian: run as dedicated user instead of nobody
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: Normal enhancement (vote)
Assignee: Gentoo Network Proxy Developers (OBSOLETE)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-03-23 17:33 UTC by Paweł Hajdan, Jr. (RETIRED)
Modified: 2011-11-11 17:26 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
patch (patch,1.13 KB, patch)
2011-06-11 08:47 UTC, Paweł Hajdan, Jr. (RETIRED) 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2011-03-23 17:33:31 UTC 
Currently dansguardian will run as nobody:nobody as default, and clamav:clamav if clamav is used.

I'd like to suggest an enhancement to create a dedicated dansguardian user and group and make the daemon run as the dansguardian user and group instead of nobody for better isolation. In case clamav is used, it'd still use clamav:clamav.

What do you think? I can submit patches to make it work that way, just asking for an opinion first.
Comment 1 Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2011-06-11 08:47:22 UTC 
Created attachment 276619 [details, diff]
patch

This is the patch I'm using on my local system. No problems detected so far, and I'm running it for a few weeks.
Comment 2 Paweł Hajdan, Jr. (RETIRED) gentoo-dev 2011-11-11 17:26:11 UTC 
Committed, patch was there for 4 months.