Re: Using User/Group `nobody` in systemd units is discouraged

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Nov 06, 2023 at 09:30:04PM -0000, Helle Vaanzinn wrote:
> Hi,
> 
> The xfsprogs userspace utilities have a systemd unit called
> xfs_scrub@.service that references "User=nobody" [1]. Ever since
> systemd version 246 using User/Group `nobody` in
> systemd units is discouraged [2]. It is advised to use the more secure
> `DynamicUser` concept [3] instead.
> 
> I couldn't find an easy way to report an issue / offer a PR for this,
> hence this message to the mailing list. If there's a better way to
> report, please advise.

Known problem fixed by
https://lore.kernel.org/linux-xfs/167243871504.718298.11721955751660856262.stgit@magnolia/
https://lore.kernel.org/linux-xfs/168506074549.3746099.6129822996056625257.stgit@frogsfrogsfrogs/

But the community has not merged that patchset or any of the subsequent
repostings due to insufficient review bandwidth.

--D

> Regards,
> 
> Helle
> 
> /--
> 
> 
> [1]
> https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/scrub/xfs_scrub@xxxxxxxxxxx#n15
> 
> [2] https://github.com/systemd/systemd/blob/v246/NEWS#L106
> 
> [3] https://0pointer.net/blog/dynamic-users-with-systemd.html



[Index of Archives]     [XFS Filesystem Development (older mail)]     [Linux Filesystem Development]     [Linux Audio Users]     [Yosemite Trails]     [Linux Kernel]     [Linux RAID]     [Linux SCSI]


  Powered by Linux