https://bugzilla.suse.com/show_bug.cgi?id=1212866 Bug ID: 1212866 Summary: AUDIT-1: gromox: gromox-snapshot running as root Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: wolfgang.frisch@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- openSUSE:Factory/gromox was recently updated with a change to one of its systemd services:

-RPM: gromox-2.9-1.2.x86_64.rpm on x86_64 +RPM: gromox-2.10-1.1.x86_64.rpm on x86_64 Package: gromox Service path: /usr/lib/systemd/system/gromox-snapshot.service -Runs as: gromox:gromox +Runs as: root:root Exec lines: ExecStart=/usr/libexec/gromox/gromox-snapshot

The last version of gromox-snapshot did not require root, so we should consider if this is necessary at all. -- You are receiving this mail because: You are on the CC list for the bug.