On Thu, Mar 12 2020, Stuart Henderson <[email protected]> wrote: > On 2020/03/12 10:40, Christopher Zimmermann wrote: >> Hi, >> >> I regularly receive warnings from security(8) about group writable mpd home >> directory. Is there a reason this needs to be group writable? >> OK to drop the group-write bit? > > How does this help? The mpd user's home directory is /var/empty. > > $ cvs blame pkg/PLIST |grep newuser > Annotations for pkg/PLIST > *************** > 1.1 (bernd 13-May-06): @newuser _mpd:560:560:daemon:Music Player > Daemon:/var/empty:/sbin/nologin
On my machine I changed _mpd's home directory to /var/spool/mpd so that I could sync the .aucat_cookie (now ~/.sndio/cookie) between _mpd and my regular user. I guess that's what happened to Christopher. -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
