https://bugzilla.suse.com/show_bug.cgi?id=1204236 Bug ID: 1204236 Summary: AUDIT-1: fluidsynth: fluidsynth service now runs as root? Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: matthias.gerstner@suse.com QA Contact: qa-bugs@suse.de CC: tom.mbrt@googlemail.com Found By: --- Blocker: --- A recent update to fluidsynth in Tumbleweed switch from a checked-in systemd service file to a version from upstream. Previously with the checked-in systemd service file, fluidsynth has been running with fluidsynth:audio lowered privileges. Now with upstream's service file it runs as root. Was this an intended change? If possible we should continue using the privilege drop, maybe also upstreaming it. -- You are receiving this mail because: You are on the CC list for the bug.