LogoopenSUSE Build Service > Projects
Sign Up | Log In

View File icecast-2.3.1_runas_icecast_user.patch of Package icecast (Project home:dm8tbr)

--- conf/icecast_minimal.xml.in.orig
+++ conf/icecast_minimal.xml.in
@@ -32,4 +32,19 @@
         <errorlog>error.log</errorlog>
       	<loglevel>3</loglevel> <!-- 4 Debug, 3 Info, 2 Warn, 1 Error -->
     </logging>
+    <security>
+        <chroot>0</chroot>
+        <!--
+          Note from the packager:
+          For security reasons you should not run the icecast server as root.
+          SUSE adds a icecast user and group for this purpose.
+
+          If you change the user/group here you need to change the ownership
+          of the @localstatedir@/log/@PACKAGE@ aswell
+         -->
+        <changeowner>
+            <user>icecast</user>
+            <group>icecast</group>
+        </changeowner>
+    </security>
 </icecast>
--- conf/icecast_shoutcast_compat.xml.in.orig
+++ conf/icecast_shoutcast_compat.xml.in
@@ -44,5 +44,17 @@
     </logging>
     <security>
         <chroot>0</chroot>
+        <!--
+          Note from the packager:
+          For security reasons you should not run the icecast server as root.
+          SUSE adds a icecast user and group for this purpose.
+
+          If you change the user/group here you need to change the ownership
+          of the @localstatedir@/log/@PACKAGE@ aswell
+         -->
+        <changeowner>
+            <user>icecast</user>
+            <group>icecast</group>
+        </changeowner>
     </security>
 </icecast>
--- conf/icecast_urlauth.xml.in.orig
+++ conf/icecast_urlauth.xml.in
@@ -43,5 +43,17 @@
     </logging>
     <security>
         <chroot>0</chroot>
+        <!--
+          Note from the packager:
+          For security reasons you should not run the icecast server as root.
+          SUSE adds a icecast user and group for this purpose.
+
+          If you change the user/group here you need to change the ownership
+          of the @localstatedir@/log/@PACKAGE@ aswell
+         -->
+        <changeowner>
+            <user>icecast</user>
+            <group>icecast</group>
+        </changeowner>
     </security>
 </icecast>
--- conf/icecast.xml.in.orig
+++ conf/icecast.xml.in
@@ -165,10 +165,16 @@
     <security>
         <chroot>0</chroot>
         <!--
+          Note from the packager:
+          For security reasons you should not run the icecast server as root.
+          SUSE adds a icecast user and group for this purpose.
+
+          If you change the user/group here you need to change the ownership
+          of the @localstatedir@/log/@PACKAGE@ aswell
+         -->
         <changeowner>
-            <user>nobody</user>
-            <group>nogroup</group>
+            <user>icecast</user>
+            <group>icecast</group>
         </changeowner>
-        -->
     </security>
 </icecast>