don't abuse nobody: drop privs to _mt-daapd instead. ok sthen@, okan@

This commit is contained in:
martynas 2009-08-07 19:25:29 +00:00
parent 84091f0b31
commit d90651532f
3 changed files with 17 additions and 6 deletions

View File

@ -1,9 +1,9 @@
# $OpenBSD: Makefile,v 1.11 2009/06/03 16:37:31 ajacoutot Exp $ # $OpenBSD: Makefile,v 1.12 2009/08/07 19:25:29 martynas Exp $
COMMENT= multi-threaded DAAP server COMMENT= multi-threaded DAAP server
DISTNAME= mt-daapd-0.2.4.2 DISTNAME= mt-daapd-0.2.4.2
PKGNAME= ${DISTNAME}p2 PKGNAME= ${DISTNAME}p3
CATEGORIES= audio net CATEGORIES= audio net
HOMEPAGE= http://www.mt-daapd.org/ HOMEPAGE= http://www.mt-daapd.org/

View File

@ -1,6 +1,6 @@
$OpenBSD: patch-contrib_mt-daapd_conf,v 1.2 2008/06/09 23:46:20 okan Exp $ $OpenBSD: patch-contrib_mt-daapd_conf,v 1.3 2009/08/07 19:25:29 martynas Exp $
--- contrib/mt-daapd.conf.orig Wed Jan 10 08:52:43 2007 --- contrib/mt-daapd.conf.orig Sat Apr 19 22:17:11 2008
+++ contrib/mt-daapd.conf Wed Jan 10 08:53:54 2007 +++ contrib/mt-daapd.conf Tue Aug 4 20:46:21 2009
@@ -23,7 +23,7 @@ @@ -23,7 +23,7 @@
# path is probably /usr/local/share/mt-daapd/admin-root. # path is probably /usr/local/share/mt-daapd/admin-root.
# #
@ -10,6 +10,15 @@ $OpenBSD: patch-contrib_mt-daapd_conf,v 1.2 2008/06/09 23:46:20 okan Exp $
# #
# port (required) # port (required)
@@ -83,7 +83,7 @@ servername mt-daapd
# as root or not.
#
-runas nobody
+runas _mt-daapd
#
# playlist (optional)
@@ -98,7 +98,7 @@ runas nobody @@ -98,7 +98,7 @@ runas nobody
# below. # below.
# #

View File

@ -1,4 +1,6 @@
@comment $OpenBSD: PLIST,v 1.4 2009/06/03 16:37:31 ajacoutot Exp $ @comment $OpenBSD: PLIST,v 1.5 2009/08/07 19:25:29 martynas Exp $
@newgroup _mt-daapd:634
@newuser _mt-daapd:634:_mt-daapd:daemon:mt-daapd:/nonexistent:/sbin/nologin
@pkgpath audio/mt-daapd,howl @pkgpath audio/mt-daapd,howl
@bin sbin/mt-daapd @bin sbin/mt-daapd
share/examples/mt-daapd/ share/examples/mt-daapd/