On Tue, Jun 12, 2018 at 4:00 PM, Guus Sliepen <[email protected]> wrote: > * Fix a potential segmentation fault when connecting to an IPv6 peer via a proxy. > * Make the systemd service file identical to the one from the 1.1 branch.
The default in the package (and as packaged by Debian) is to run tinc as root. It's quite easy to run tinc as a normal user by doing: ExecStart=/usr/sbin/tincd --user=tinc -n %i -D and then having /etc/tinc be owned by the tinc user. Why isn't this the recommended default? Tinc listens on public interfaces to be useful and can have potentially exploitable bugs (as can also be seen in this version). Cheers, Pedro _______________________________________________ tinc mailing list [email protected] https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
