Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Systemd user nobody #139

Closed
omgold opened this issue Oct 6, 2022 · 4 comments
Closed

Systemd user nobody #139

omgold opened this issue Oct 6, 2022 · 4 comments

Comments

@omgold
Copy link

omgold commented Oct 6, 2022

The systemd units set the user to nobody. As this not advisable for security reasons, system produces annoying warnings

Okt 06 09:58:58 systemd[1]: [🡕] /usr/lib/systemd/system/doh-client.service:15: Special user nobody configured, this is not safe!

My suggestion would be to user DynamicUser=yes instead of User=nobody

@m13253
Copy link
Owner

m13253 commented Oct 6, 2022

I am good with this change.
Have you checked whether the change introduces new bugs? (Especially permission related ones.)

@omgold
Copy link
Author

omgold commented Oct 6, 2022

Well, it works for me, and journal doesn't produce any messages. So I guess it is okay.

@m13253
Copy link
Owner

m13253 commented Oct 6, 2022

I'm going to merge PR #140 in 2–3 days.
Anyone who is actively using dns-over-https with systemd can help me test this change.

@vinnyperella
Copy link

I just added it to my instance and it seems to be fine so far.

@m13253 m13253 closed this as completed Oct 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants