Actions
Task #6952
openppa: run as a non-root user
Effort:
Difficulty:
Label:
Description
Like the RPM, which uses run-as.
Updated by Jason Ish 12 months ago
- Related to Feature #6936: landlock: enable by default added
Updated by Victor Julien 12 months ago
- Status changed from New to Assigned
- Assignee changed from OISF Dev to Peter Manev
- Priority changed from Normal to High
One question is: when should we do this? Seems risky to do it in a patch release?
Updated by Jason Ish 12 months ago
Victor Julien wrote in #note-4:
One question is: when should we do this? Seems risky to do it in a patch release?
Yes, it can be risky. You'd have to get all the chmod's and chown's right in the upgrade script. Would still need to do that when upgrading to a new major release, just breakage is a little more acceptable at a major version. I think making it a goal for 8.0 would be good.
Updated by Victor Julien 9 months ago
- Blocks Story #7160: deployment: improve secure deployment added
Updated by Peter Manev 26 days ago ยท Edited
For Suricata 8 implement:
- run as user
- systemd
note: make sure ownership is covered too.
Actions