[Pkg-privacy-maintainers] snowflake-proxy service running as root
Lukas Fink
lukas.fink1 at gmail.com
Thu Sep 7 13:48:48 BST 2023
Hi,
the snowflake-proxy systemd service is running as root by default. I
think it would be better to restrict its permissions in order to reduce
the impact of potential security vulnerabilities.
I added
[Service]
DynamicUser=yes
to the snowflake-proxy.service file.
It might make sense to take this even further like in this example:
https://aur.archlinux.org/cgit/aur.git/tree/snowflake-proxy.service?h=snowflake-pt-proxy
More information about the Pkg-privacy-maintainers
mailing list