[Bug 279460] multimedia/motion: don't run as root

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 02 Jun 2024 07:59:11 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279460

            Bug ID: 279460
           Summary: multimedia/motion: don't run as root
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: dimitri@kaparis.name
                CC: ports@blievers.net
                CC: ports@blievers.net
             Flags: maintainer-feedback?(ports@blievers.net)

Created attachment 251148
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=251148&action=edit
use command args for pid and config options

Motion service installs and runs under root account, which is not recommended
security-wise.

I've created a set of patches that create a restricted user and group `motion`
and runs the motion service under it. They applied cleanly on the main branch
as of 2024-04-10, but haven't been tested in actual build. I've manually
applied the changes from these patches to my installation and it's operating
without issues.

-- 
You are receiving this mail because:
You are the assignee for the bug.