tinyproxy port is unfixed for long time with several problems
Igor Roshchin
freebsd at str.komkon.org
Mon Nov 21 21:06:02 UTC 2016
Hello!
A few days ago, I installed tinyproxy port from the package (pkg install).
I see that tinyproxy [still] has two problems that had been reported and
discussed in various venues, including at least one FreeBSD bug report.
Unfortunately, nothing has been done with that for a long time.
1. Problem #1: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207051
- see the initial description by Jason Mann there:
Daemon is listening on ipv6 only.
2. Problem #2: https://github.com/tinyproxy/tinyproxy/issues/24
Daemon is unable to create the .pid file in /var/run due to dropped
privelege.
A possible solution: create /var/run/tinyproxy owned by nobody:nobody
and change the pid file to /var/run/tinyproxy/tinyproxy.pid
There is some resistance from @obnoxxx, but I suspect (and hope) it is
from the misunderstanding.
There is a more detailed explanation of what could be done (see the
recent post by St-Ranger there).
And an optional change, but useful (IMHO) from the security point of view:
3. Replace the user/group "nobody" used by the daemon to the dedicated
"tinyproxy:tinyproxy". This would separate this server from any other, -
in the way that is done with several other ports on FreeBSD.
Best regards,
Igor
More information about the freebsd-ports
mailing list