Package: janus Version: 1.1.2-1+b4 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
The systemd service for janus currently runs janus as root. Does it need to? Upstream seems a bit ambiguous on that point. Both examples I could find (in main.dox) use root, but one has the comment "Root generally not recommended but necessary if you are using the Raspberry Pi GPIO from Python." As far as I can tell janus only listens on ports > 1024 by default, but there could be some other issues I suppose. - -- System Information: Debian Release: trixie/sid APT prefers testing-debug APT policy: (500, 'testing-debug'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: arm64 Kernel: Linux 6.7.12-amd64 (SMP w/20 CPU threads; PREEMPT) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages janus depends on: ii init-system-helpers 1.66 ii libc6 2.38-11 ii libconfig9 1.5-0.4+b1 ii libcurl4t64 8.7.1-5 ii libduktape207 2.7.0-2+b1 ii libglib2.0-0t64 2.80.2-1 ii libjansson4 2.14-2+b2 ii liblua5.3-0 5.3.6-2+b2 ii libmicrohttpd12t64 1.0.0-2.1+b1 ii libnanomsg5 1.1.5+dfsg-1.1+b1 ii libnice10 0.1.21-2+b1 ii libogg0 1.3.5-3+b1 ii libopus0 1.4-1+b1 ii libpaho-mqtt1.3 1.3.13-1+b2 ii librabbitmq4 0.11.0-1+b2 ii libsofia-sip-ua0t64 1.12.11+20110422.1+1e14eea~dfsg-6.1+b1 ii libsrtp2-1 2.5.0-3+b1 ii libssl3t64 3.2.1-3 ii libsystemd0 255.5-1 ii libusrsctp2 0.9.5.0-2+b1 ii libwebsockets19t64 4.3.3-1.1 ii zlib1g 1:1.3.dfsg+really1.3.1-1 Versions of packages janus recommends: ii lua-ansicolors 1.0.2-3 ii lua-json 1.3.4-2 ii ssl-cert 1.1.2 Versions of packages janus suggests: pn janus-doc <none> ii janus-tools 1.1.2-1+b4 - -- Configuration Files: /etc/janus/janus.plugin.videoroom.jcfg changed [not included] - -- no debconf information -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEkiyHYXwaY0SiY6fqA0U5G1WqFSEFAmZSG1IACgkQA0U5G1Wq FSF/nhAAvi/zjpRcBgpw3+pARPqleUBecF8uqvtzhiCnvibVuNqlMzkq2lsHhlzG ihefhzL1WvOpzvMj+AdGqv8HWQHQaDv7MJfJu1vtZiAcIZDFGxSUtvesGZLwqeGf sarhBWe2Yu462BG8D35Dso5lI281b7BB2G4y/znE2gkDal0L2qNP5Un8MweVYk/x oW78/+7VEL2fUpF+xn6P6EE2Ev9D4zxuFK8Pgut+l3/KL3nJTya+2slImXbHKdDV Slq0sDKp3PR8kvokmkPs9ryJknA5kX1a6Yo2SNiGM8gNXTYnPtF1EvK9rD0IYYlN iDhr7KvBEZjj3Sv+2BzEezgIHr8ZwLQ4iwPz7PUVvSHSeDsAAg6s+SbJUA/JKPYU fnHqC8K38/f31+y00hbO3yQoKP3tG0l8WBI3cvHr6iXjaMtDcOEFdNhErqzhYp7i ga3i1VAsQr0K/5pha/5xNpGktQAUXnWQcvcsUtNghzQanXAXSHeLO9/lPMWQ+GLO ZaKtchEvBdFpe8j6dqGpq/j28FSgKc1zMezNDkYamwSX2LbOObytyZ50Osu1av2f uot8F0X4i15WNQO6eHPJ4kI7ltr19DE7OQj/ZJ7hn4G5K8/d4p2qw/cwxrj8YhmU XlLJGPsHWLkIjEz8mPzd8Q0EloggIRL6puE27UrD07qQl/k2ow8= =P5W5 -----END PGP SIGNATURE-----