commit:     ee7dfe493ec4984750352a7184967121d02d50c8
Author:     Yixun Lan <dlan <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 27 08:55:02 2020 +0000
Commit:     Yixun Lan <dlan <AT> gentoo <DOT> org>
CommitDate: Sun Sep 27 09:12:18 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ee7dfe49

net-proxy/trojan: run as non-privilege user due to security concern

Package-Manager: Portage-3.0.0, Repoman-2.3.23
Signed-off-by: Yixun Lan <dlan <AT> gentoo.org>

 net-proxy/trojan/files/trojan.initd                                | 5 ++++-
 net-proxy/trojan/{trojan-1.16.0.ebuild => trojan-1.16.0-r1.ebuild} | 0
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/net-proxy/trojan/files/trojan.initd 
b/net-proxy/trojan/files/trojan.initd
index 2990245430d..c87f6576d6b 100644
--- a/net-proxy/trojan/files/trojan.initd
+++ b/net-proxy/trojan/files/trojan.initd
@@ -20,6 +20,7 @@ depend() {
 start() {
        ebegin "Starting Trojan, Log File: ${TJ_LOG}"
        start-stop-daemon --start -b \
+               --user nobody --group nobody \
                -1 "${TJ_LOG}" -2 "${TJ_LOG}" \
                -m -p "${TJ_PIDFILE}" \
                --exec /usr/bin/trojan  -- "${TJ_CONFIG}"
@@ -28,6 +29,8 @@ start() {
 
 stop() {
        ebegin "Stopping Trojan"
-       start-stop-daemon --stop -p "${TJ_PIDFILE}"
+       start-stop-daemon --stop \
+               --user nobody --group nobody \
+               -p "${TJ_PIDFILE}"
        eend $?
 }

diff --git a/net-proxy/trojan/trojan-1.16.0.ebuild 
b/net-proxy/trojan/trojan-1.16.0-r1.ebuild
similarity index 100%
rename from net-proxy/trojan/trojan-1.16.0.ebuild
rename to net-proxy/trojan/trojan-1.16.0-r1.ebuild

Reply via email to