Bug ID 1212866
Summary AUDIT-1: gromox: gromox-snapshot running as root
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter wolfgang.frisch@suse.com
QA Contact qa-bugs@suse.de
Target Milestone ---
Found By ---
Blocker ---

openSUSE:Factory/gromox was recently updated with a change to one of its
systemd services:

> -RPM: gromox-2.9-1.2.x86_64.rpm on x86_64
> +RPM: gromox-2.10-1.1.x86_64.rpm on x86_64
>  Package: gromox
>  Service path: /usr/lib/systemd/system/gromox-snapshot.service
> -Runs as: gromox:gromox
> +Runs as: root:root
>  Exec lines:
>      ExecStart=/usr/libexec/gromox/gromox-snapshot

The last version of gromox-snapshot did not require root,
so we should consider if this is necessary at all.

You are receiving this mail because: