Commit 5e001837 authored Jan 14, 2015 by Gustavo Zacarias Committed by Thomas Petazzoni Jan 14, 2015

squid: create a user/group

Even though squid uses nobody/nogroup it ain't good for security if
every daemon around uses it, specially since squid is used as a caching
proxy most of the time and that would mean other daemons/scripts run as
nobody would have access to potentially sensitive information.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

parent 0e7733e9

package/squid/squid.mk

+6 −1

Original line number	Diff line number	Diff line
		@@ -39,7 +39,8 @@ SQUID_CONF_OPTS = \
		--with-logdir=/var/log/squid/ \
		--with-pidfile=/var/run/squid.pid \
		--with-swapdir=/var/cache/squid/ \
		--enable-icap-client
		--enable-icap-client \
		--with-default-user=squid

		# On uClibc librt needs libpthread
		ifeq ($(BR2_TOOLCHAIN_HAS_THREADS)$(BR2_TOOLCHAIN_USES_UCLIBC),yy)
		@@ -60,4 +61,8 @@ endef

		SQUID_POST_INSTALL_TARGET_HOOKS += SQUID_CLEANUP_TARGET

		define SQUID_USERS
		squid -1 squid -1 * - - - Squid proxy cache
		endef

		$(eval $(autotools-package))