diff options
| author | Mark Felder <feld@FreeBSD.org> | 2017-02-02 17:45:27 +0000 |
|---|---|---|
| committer | Mark Felder <feld@FreeBSD.org> | 2017-02-02 17:45:27 +0000 |
| commit | 343a84548db3bd27bd034c35fb024758ebf7979d (patch) | |
| tree | 4fe26009dbcf37bfc7639a46ec9b511eba15ec45 /UIDs | |
| parent | Deprecate net/tcpdump398 due to multiple vulnerabilities. Set expiration (diff) | |
www/uwsgi: Further rc script security improvements
This update introduces a dedicated user for uwsgi and introduces the
uwsgi_socket_owner setting which by default is set to www:www. The
previous change to socket mode of 600 has been modified to 660 as well.
This change further increases security while restoring compatibility.
MFH: 2017Q1
Differential Revision: https://reviews.freebsd.org/D9398
Diffstat (limited to '')
| -rw-r--r-- | UIDs | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -111,7 +111,7 @@ solr:*:161:161::0:0:Apache Solr System:/var/db/solr:/usr/sbin/nologin octoprint:*:162:162::0:0:OctoPrint Daemon:/usr/local/octoprint:/usr/sbin/nologin _iked:*:163:163::0:0:IKEv2 Daemon:/var/empty:/usr/sbin/nologin lightdm:*:164:164::0:0:Light Display Manager:/var/lib/lightdm-data:/usr/sbin/nologin -# free: 165 +uwsgi:*:165:165::0:0:uwsgi Daemon:/nonexistent:/usr/sbin/nologin # free: 166 # free: 167 # free: 168 |