| Bug ID | 1212866 |
|---|---|
| Summary | AUDIT-1: gromox: gromox-snapshot running as root |
| Classification | openSUSE |
| Product | openSUSE Tumbleweed |
| Version | Current |
| Hardware | Other |
| OS | Other |
| Status | NEW |
| Severity | Normal |
| Priority | P5 - None |
| Component | Security |
| Assignee | security-team@suse.de |
| Reporter | wolfgang.frisch@suse.com |
| QA Contact | qa-bugs@suse.de |
| Target Milestone | --- |
| Found By | --- |
| Blocker | --- |
openSUSE:Factory/gromox was recently updated with a change to one of its
systemd services:
> -RPM: gromox-2.9-1.2.x86_64.rpm on x86_64
> +RPM: gromox-2.10-1.1.x86_64.rpm on x86_64
> Package: gromox
> Service path: /usr/lib/systemd/system/gromox-snapshot.service
> -Runs as: gromox:gromox
> +Runs as: root:root
> Exec lines:
> ExecStart=/usr/libexec/gromox/gromox-snapshot
The last version of gromox-snapshot did not require root,
so we should consider if this is necessary at all.