Browse Source

memcached: use memcached user

This avoid using `nobody` as user since multiple services fallback to
this user, resulting in a security issue. The UID was taken from Gentoos
`acct-user` repository.

https://gitweb.gentoo.org/repo/gentoo.git/tree/acct-user/memcached/memcached-0-r1.ebuild

Signed-off-by: Paul Spooren <mail@aparcar.org>
lilik-openwrt-22.03
Paul Spooren 3 years ago
committed by Rosen Penev
parent
commit
c57abd4a56
3 changed files with 3 additions and 2 deletions
  1. +1
    -0
      net/memcached/Makefile
  2. +1
    -1
      net/memcached/files/memcached.config
  3. +1
    -1
      net/memcached/files/memcached.init

+ 1
- 0
net/memcached/Makefile View File

@ -32,6 +32,7 @@ define Package/memcached
DEPENDS:=+libevent2 +libpthread DEPENDS:=+libevent2 +libpthread
TITLE:=The high-performance, distributed memory object caching system TITLE:=The high-performance, distributed memory object caching system
URL:=https://memcached.org/ URL:=https://memcached.org/
USERID:=memcached=441:memcached=441
endef endef
define Package/memcached/description define Package/memcached/description


+ 1
- 1
net/memcached/files/memcached.config View File

@ -1,5 +1,5 @@
config memcached config memcached
option user 'nobody'
option user 'memcached'
option maxconn '1024' option maxconn '1024'
option listen '0.0.0.0' option listen '0.0.0.0'
option port '11211' option port '11211'


+ 1
- 1
net/memcached/files/memcached.init View File

@ -12,7 +12,7 @@ start_instance () {
config_get port "$section" port config_get port "$section" port
config_get memory "$section" memory config_get memory "$section" memory
service_start /usr/bin/memcached -d -u ${user:-nobody} \
service_start /usr/bin/memcached -d -u ${user:-memcached} \
-c ${maxconn:-1024} -l ${listen:-0.0.0.0} \ -c ${maxconn:-1024} -l ${listen:-0.0.0.0} \
-p ${port:-11211} -U ${port:-11211} -m ${memory:-64} -p ${port:-11211} -U ${port:-11211} -m ${memory:-64}
} }


Loading…
Cancel
Save