On Thu, Mar 12, 2020 at 04:03:26PM +0100, Jeremie Courreges-Anglas wrote: > On Thu, Mar 12 2020, Stuart Henderson <[email protected]> wrote: > > On 2020/03/12 10:40, Christopher Zimmermann wrote: > >> Hi, > >> > >> I regularly receive warnings from security(8) about group writable mpd home > >> directory. Is there a reason this needs to be group writable? > >> OK to drop the group-write bit? > > > > How does this help? The mpd user's home directory is /var/empty. > > > > $ cvs blame pkg/PLIST |grep newuser > > Annotations for pkg/PLIST > > *************** > > 1.1 (bernd 13-May-06): @newuser _mpd:560:560:daemon:Music > > Player Daemon:/var/empty:/sbin/nologin > > On my machine I changed _mpd's home directory to /var/spool/mpd so that > I could sync the .aucat_cookie (now ~/.sndio/cookie) between _mpd and my > regular user. I guess that's what happened to Christopher.
Oh right, *that* is the reason why i've been seing the same for a while.
