[Pkg-privacy-maintainers] snowflake-proxy service running as root

Lukas Fink lukas.fink1 at gmail.com
Thu Sep 7 13:48:48 BST 2023


Hi,

the snowflake-proxy systemd service is running as root by default. I 
think it would be better to restrict its permissions in order to reduce 
the impact of potential security vulnerabilities.

I added

[Service]
DynamicUser=yes

to the snowflake-proxy.service file.

It might make sense to take this even further like in this example:
https://aur.archlinux.org/cgit/aur.git/tree/snowflake-proxy.service?h=snowflake-pt-proxy



More information about the Pkg-privacy-maintainers mailing list