Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

建议安装时初始化 log 配置及预创建日志文件（nobody） #38

Closed
RPRX opened this issue Aug 14, 2020 · 6 comments
Closed

建议安装时初始化 log 配置及预创建日志文件（nobody） #38

RPRX opened this issue Aug 14, 2020 · 6 comments

Comments

@RPRX
Copy link
Contributor

RPRX commented Aug 14, 2020

另一个建议：运行脚本时若检测到 /var/log/v2ray/ 目录下已有文件，则更改全部文件所属的用户和组。

因 nobody 对日志文件的权限不够而导致 v2ray 无法启动是一个很常见又隐蔽的坑，若非更换脚本，则通常是因为用户先用更高的权限手动测试时先创建了日志文件。这两个建议可以在很大程度上降低这个问题的出现概率。
@RPRX
Copy link
Contributor Author

RPRX commented Aug 14, 2020

另一个解决方案：切换回 root。v2ray 不是木马，也无法通过 v2ray 上传木马，似乎没有用 nobody 的必要性。

由于 VLESS，直接使用证书文件的场景也越来越多了，相关讨论：v2ray/v2ray-core#2328

@RPRX
Copy link
Contributor Author

RPRX commented Aug 14, 2020

https://www.v2fly.org/guide/install.html#linux-%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC

go.sh 相关内容已被移除，这里需要补充更多关于新脚本的说明，比如全新安装和目录说明。

ghost pushed a commit that referenced this issue Aug 14, 2020
@dctxmei
fix: Initialize log file permissions
9b090f8 
1. It seems that someone will run V2Ray directly through commands instead of systemd first, which will cause wrong Log file permissions and affect subsequent systemd operations.

issue #38
@ghost ghost mentioned this issue Aug 14, 2020
Merged
@IceCodeNew
Copy link
Collaborator

另一个解决方案：切换回 root。v2ray 不是木马，也无法通过 v2ray 上传木马，似乎没有用 nobody 的必要性。

这个判断在我看来是没有道理的，通过诸如缓冲区溢出等方式，可能可以通过以 root 身份执行的 v2ray 进程实现特权提升。在绝大多数场景下最小权限原则都是适用的。

@RPRX
Copy link
Contributor Author

RPRX commented Aug 14, 2020

这个判断在我看来是没有道理的，通过诸如缓冲区溢出等方式，可能可以通过以 root 身份执行的 v2ray 进程实现特权提升。在绝大多数场景下最小权限原则都是适用的。

绝大多数 Go 程序不会有这样的漏洞。

@ghost
Copy link

ghost commented Aug 14, 2020

對應該項目，我假定的前提是：

用者應當知道自己想要什麼，也明白自己在做什麼，並且會為自己的行為負責。

所以用者有需求的話，可以自行修改單元文檔，但考慮到一些用者未必有此經驗，我會著手補充一下 Wiki。

ghost pushed a commit that referenced this issue Aug 15, 2020
@dctxmei
feat: Add new Wiki content
f3b6f3d 
1. Migrate from the old script to this.
2. Move .dat files from lib directory to share directory.
3. To use the VLESS protocol.

issue #38
This was referenced Aug 15, 2020
Merged
Merged
RPRX added a commit to v2fly/v2fly-github-io that referenced this issue Aug 15, 2020
@dctxmei @RPRX
fix: Contents of the new script (#24)
60949b3 
* fix: Contents of the new script

1. Correction of the content of the fhs-install-v2ray project.
2. Add the contents of the golang-v2ray-core package of the Debian
   operating system.

issue v2fly/fhs-install-v2ray#38

* Update install.md

Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>
@ghost ghost closed this as completed Aug 15, 2020
@xjtuecho
Copy link

xjtuecho commented Oct 10, 2022 •
edited

刚刚踩了这个坑，附上解决方案：sudo chown -R nobody:nogroup /var/log/v2ray/

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@xjtuecho @IceCodeNew @RPRX