Bug#1071870: janus: run janus daemon as non-root?

[David Bremner]

Package: janus
Version: 1.1.2-1+b4
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The systemd service for janus currently runs janus as root. Does it
need to? Upstream seems a bit ambiguous on that point. Both examples I
could find (in main.dox) use root, but one has the comment "Root
generally not recommended but necessary if you are using the Raspberry
Pi GPIO from Python."

As far as I can tell janus only listens on ports > 1024 by default,
but there could be some other issues I suppose.



- -- System Information:
Debian Release: trixie/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64

Kernel: Linux 6.7.12-amd64 (SMP w/20 CPU threads; PREEMPT)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages janus depends on:
ii  init-system-helpers  1.66
ii  libc6                2.38-11
ii  libconfig9           1.5-0.4+b1
ii  libcurl4t64          8.7.1-5
ii  libduktape207        2.7.0-2+b1
ii  libglib2.0-0t64      2.80.2-1
ii  libjansson4          2.14-2+b2
ii  liblua5.3-0          5.3.6-2+b2
ii  libmicrohttpd12t64   1.0.0-2.1+b1
ii  libnanomsg5          1.1.5+dfsg-1.1+b1
ii  libnice10            0.1.21-2+b1
ii  libogg0              1.3.5-3+b1
ii  libopus0             1.4-1+b1
ii  libpaho-mqtt1.3      1.3.13-1+b2
ii  librabbitmq4         0.11.0-1+b2
ii  libsofia-sip-ua0t64  1.12.11+20110422.1+1e14eea~dfsg-6.1+b1
ii  libsrtp2-1           2.5.0-3+b1
ii  libssl3t64           3.2.1-3
ii  libsystemd0          255.5-1
ii  libusrsctp2          0.9.5.0-2+b1
ii  libwebsockets19t64   4.3.3-1.1
ii  zlib1g               1:1.3.dfsg+really1.3.1-1

Versions of packages janus recommends:
ii  lua-ansicolors  1.0.2-3
ii  lua-json        1.3.4-2
ii  ssl-cert        1.1.2

Versions of packages janus suggests:
pn  janus-doc    <none>
ii  janus-tools  1.1.2-1+b4

- -- Configuration Files:
/etc/janus/janus.plugin.videoroom.jcfg changed [not included]

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
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=P5W5
-----END PGP SIGNATURE-----