Date: Sat, 04 Apr 2015 23:33:25 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 199167] sysutils/py-salt: Run master as non root user Message-ID: <bug-199167-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199167 Bug ID: 199167 Summary: sysutils/py-salt: Run master as non root user Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: freebsd-ports-bugs@FreeBSD.org Reporter: luca.corti@infinito.it CC: christer.edwards@gmail.com Flags: maintainer-feedback?(christer.edwards@gmail.com) CC: christer.edwards@gmail.com Hi, This is more of a feature request, but... Salt does no privilege separation and runs as root. For the minion root privileges are needed to perform most of its duties, so this is probably not solvable unless some form of privilege separation is applied upstream. For the master on the other hand, which is a network daemon makes this look quite bad. Fortunately the master supports non-root operation and is probably easy to make it run like that. So, it would be cool to have an option in rc.conf for enabling execution of the master. Ideally, this should be the default. See: https://github.com/saltstack/salt/issues/5249 https://github.com/saltstack/salt/issues/6746 -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-199167-13>