| Bug ID | 1204236 |
|---|---|
| Summary | AUDIT-1: fluidsynth: fluidsynth service now runs as root? |
| Classification | openSUSE |
| Product | openSUSE Tumbleweed |
| Version | Current |
| Hardware | Other |
| OS | Other |
| Status | NEW |
| Severity | Normal |
| Priority | P5 - None |
| Component | Security |
| Assignee | security-team@suse.de |
| Reporter | matthias.gerstner@suse.com |
| QA Contact | qa-bugs@suse.de |
| CC | tom.mbrt@googlemail.com |
| Found By | --- |
| Blocker | --- |
A recent update to fluidsynth in Tumbleweed switch from a checked-in systemd service file to a version from upstream. Previously with the checked-in systemd service file, fluidsynth has been running with fluidsynth:audio lowered privileges. Now with upstream's service file it runs as root. Was this an intended change? If possible we should continue using the privilege drop, maybe also upstreaming it.