Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request]: [native] Run meshtasticd as an unprivileged user #6157

Open
battlehax opened this issue Feb 26, 2025 · 0 comments
Open

[Feature Request]: [native] Run meshtasticd as an unprivileged user #6157

battlehax opened this issue Feb 26, 2025 · 0 comments
Assignees
Labels
3.0 Planned for next major release enhancement New feature or request linux-native related to running meshtastic as daemon on native linux pinned Exclude from stale processing

Comments

@battlehax
Copy link

Platform

Linux Native

Description

As it stands, on a linux native node, meshtasticd is running as root. This could be troublesome if the right kind of bugs are discovered in the future. Discussed with @vidplace7 on discord and, though it may be something for 3.0, it seems worth addressing.
The resolution would involve at least: setting up udev rules or similar to allow unprivileged spi access, creating a user to run the service, with the proper permissions and home to store vfs, without the ability to login, and modifying the service to run as this user. I believe this should be possible in the packaging for most if not all pre-built package distros in the opensuse builder and hopefully openwrt as well.

@battlehax battlehax added the enhancement New feature or request label Feb 26, 2025
@vidplace7 vidplace7 added 3.0 Planned for next major release pinned Exclude from stale processing labels Feb 26, 2025
@vidplace7 vidplace7 self-assigned this Feb 26, 2025
@fifieldt fifieldt added the linux-native related to running meshtastic as daemon on native linux label Feb 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3.0 Planned for next major release enhancement New feature or request linux-native related to running meshtastic as daemon on native linux pinned Exclude from stale processing
Projects
None yet
Development

No branches or pull requests

3 participants