Bug 673978

Summary:	net-misc/sslh: Sample config and provided systemd service clash
Product:	Gentoo Linux	Reporter:	William Pettersson <william>
Component:	Current packages	Assignee:	Michael Palimaka (kensington) <kensington>
Status:	RESOLVED FIXED
Severity:	normal	CC:	candrews
Priority:	Normal	Keywords:	PATCH
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Patch to sample config file

Description William Pettersson 2018-12-29 13:23:42 UTC

The systemd service file shipped with sslh has been hardened recently, including the use of DynamicUser (systemd's version of privilege dropping). However, this means the "--user nobody" option which we give as part of the sample configuration file will fail, causing sslh to fail to start.

The sample configuration Gentoo ships is not part of upstream, so there's not much that upstream can do. However, it might be nice to add something to example configuration script to point out that privilege dropping won't work with systemd.

Comment 1 William Pettersson 2018-12-29 13:32:05 UTC

Created attachment 558804 [details, diff]
Patch to sample config file

Here's one proposal for updated sample configuration. I did not think that updating this would warrant a revision update as it's just documenting a commented config file, but am happy to be told otherwise. Also happy for any other tips.

Comment 2 Larry the Git Cow gentoo-dev

2019-03-25 11:46:39 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5f9d49338827aa158ae5a94ce62d7fb722d1e785

commit 5f9d49338827aa158ae5a94ce62d7fb722d1e785
Author:     William Pettersson <william@ewpettersson.se>
AuthorDate: 2018-12-29 13:23:17 +0000
Commit:     Michael Palimaka <kensington@gentoo.org>
CommitDate: 2019-03-25 11:46:14 +0000

    net-misc/sslh: Update sample config file #673978
    
    Updates the sample config file to support the systemd-level privilege
    dropping, as given by the upstream service file.
    
    Closes: https://bugs.gentoo.org/673978
    Signed-off-by: William Pettersson <william@ewpettersson.se>
    Signed-off-by: Michael Palimaka <kensington@gentoo.org>

 net-misc/sslh/files/sslh.conf.d-2 | 6 ++++++
 1 file changed, 6 insertions(+)

Comment 3 Michael Palimaka (kensington) gentoo-dev

2019-03-25 11:47:03 UTC

Thanks for the patch, and sorry for the delay in merging it.