394373 – net-misc/minidlna-1.0.22 should not run daemon as root

Bug 394373 - net-misc/minidlna-1.0.22 should not run daemon as root

Summary: net-misc/minidlna-1.0.22 should not run daemon as root

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Michael Weber (RETIRED)

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2011-12-11 20:29 UTC by Yuri Karaban
Modified:	2012-01-29 00:33 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Yuri Karaban 2011-12-11 20:29:43 UTC

I don't think it is a good idea to run minidlna daemon as root. It is pretty easy to fix, just pass proper --user option to start-stop-daemon in init script.

I think as minimum, the --user can be nobody. But since minidlna works with filesystem: it maintains media cache database and writes log as file, better to add a user specifically for minidlna.

Reproducible: Always

Comment 1 Michael Weber (RETIRED) gentoo-dev

2012-01-29 00:33:44 UTC

I've fixed this with the 1.0.23 version bump.

+*minidlna-1.0.23 (29 Jan 2012)
+
+  29 Jan 2012; Michael Weber <xmw@gentoo.org> +minidlna-1.0.23.ebuild,
+  +files/minidlna-1.0.23.confd, +files/minidlna-1.0.23.initd:
+  Version bump. No longer run as root per default (thanks Yuri Karaban, bug
+  394373)
+