[Bug 293501] net/fiche: drop privileges to $fiche_user in service

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 28 Feb 2026 13:51:04 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293501

            Bug ID: 293501
           Summary: net/fiche: drop privileges to $fiche_user in service
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: zi@FreeBSD.org
          Reporter: nimaje+fbz@bureaucracy.de
                CC: zi@FreeBSD.org
          Assignee: zi@FreeBSD.org
             Flags: maintainer-feedback?(zi@FreeBSD.org)
 Attachment #268416 maintainer-approval?(zi@FreeBSD.org)
             Flags:
                CC: zi@FreeBSD.org

Created attachment 268416
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=268416&action=edit
net/fiche: drop privileges to $fiche_user in service

The fiche port creates a fiche user and group, but it doesn't get used. It
seems like it was intended to drop privileges in the service instead of running
as root. The pidfile has to be created and given to $fiche_user in 
fiche_prestart  as only root can write in /var/run/ directly. If the service
was used before some files might belong to root, so notify users via an upgrade
message, that they have to change owners for them. While here move USERS and
GROUPS below the USES-block where it belongs.

QA:
  * portlint: OK (looks fine.)

-- 
You are receiving this mail because:
You are the assignee for the bug.