Package: snowflake-proxy
Version: 2.5.1-1+b3
Severity: normal

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situatio

I installed the snowflake-proxy package, and decided to make sure that it was 
running as an unprivileged user like any sane program would.
Instead, I discovered that it runs as root with absolutely nothing to protect 
other programs on the same system from it by default (due to the absence of a 
`User=` or `DynamicUser=` line in snowflake-proxy.service).
snowflake-proxy works perfectly without root privileges (tested and confirmed 
working with `DynamicUser=yes` in snowflake-proxy.service).

-- System Information:
Debian Release: 12.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-21-amd64 (SMP w/20 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages snowflake-proxy depends on:
ii  libc6  2.38-6

snowflake-proxy recommends no packages.

snowflake-proxy suggests no packages.

-- no debconf information

Reply via email to