diff options
| author | Paul Spooren <mail@aparcar.org> | 2021-08-24 13:31:19 -1000 |
|---|---|---|
| committer | Rosen Penev <rosenp@gmail.com> | 2021-08-28 16:50:48 -0700 |
| commit | c57abd4a56369adebe809683d2f6bb33252cc838 (patch) | |
| tree | 2bfe72cb5aeab52a490a866fa3b253d0ec03c205 | |
| parent | 2d3409d5c4693edc7d14f9bd04a678c956bd8f17 (diff) | |
memcached: use memcached user
This avoid using `nobody` as user since multiple services fallback to
this user, resulting in a security issue. The UID was taken from Gentoos
`acct-user` repository.
https://gitweb.gentoo.org/repo/gentoo.git/tree/acct-user/memcached/memcached-0-r1.ebuild
Signed-off-by: Paul Spooren <mail@aparcar.org>
| -rw-r--r-- | net/memcached/Makefile | 1 | ||||
| -rw-r--r-- | net/memcached/files/memcached.config | 2 | ||||
| -rw-r--r-- | net/memcached/files/memcached.init | 2 |
3 files changed, 3 insertions, 2 deletions
diff --git a/net/memcached/Makefile b/net/memcached/Makefile index 0ea7407ca..4ad2165ca 100644 --- a/net/memcached/Makefile +++ b/net/memcached/Makefile @@ -32,6 +32,7 @@ define Package/memcached DEPENDS:=+libevent2 +libpthread TITLE:=The high-performance, distributed memory object caching system URL:=https://memcached.org/ + USERID:=memcached=441:memcached=441 endef define Package/memcached/description diff --git a/net/memcached/files/memcached.config b/net/memcached/files/memcached.config index 4071116b7..7a27c84bc 100644 --- a/net/memcached/files/memcached.config +++ b/net/memcached/files/memcached.config @@ -1,5 +1,5 @@ config memcached - option user 'nobody' + option user 'memcached' option maxconn '1024' option listen '0.0.0.0' option port '11211' diff --git a/net/memcached/files/memcached.init b/net/memcached/files/memcached.init index 063bf6472..10a8d0a39 100644 --- a/net/memcached/files/memcached.init +++ b/net/memcached/files/memcached.init @@ -12,7 +12,7 @@ start_instance () { config_get port "$section" port config_get memory "$section" memory - service_start /usr/bin/memcached -d -u ${user:-nobody} \ + service_start /usr/bin/memcached -d -u ${user:-memcached} \ -c ${maxconn:-1024} -l ${listen:-0.0.0.0} \ -p ${port:-11211} -U ${port:-11211} -m ${memory:-64} } |