Skip to content

Conversation

@dkwo
Copy link
Contributor

@dkwo dkwo commented Dec 7, 2024

I tested the changes in this PR: yes
If not using privsep, these capabilieties are enough in my tests to run as non-root user.

@ahesford ahesford added the core core package label Dec 9, 2024
@dkwo dkwo force-pushed the dhcpcd-cap branch 3 times, most recently from 59abd2a to 5af5b19 Compare February 26, 2025 15:15
@dkwo dkwo changed the title [rfc] dhcpcd: use setpriv in service to run as non-root dhcpcd: add unprivileged service Jun 14, 2025
@dogknowsnx
Copy link
Contributor

dogknowsnx commented Aug 12, 2025

Been running v10.2.4 for several weeks now without issues - haven't tested this PR though.

@dkwo
Copy link
Contributor Author

dkwo commented Aug 14, 2025

You are also welcome to test this pr: the usual root service is still there, unchanged.

@dogknowsnx
Copy link
Contributor

dogknowsnx commented Aug 14, 2025

So just in theory before testing this:

  • changing the group is fine since we'd be root otherwise anyway
  • excluding the world from /etc/dhcpcd.conf is desirable in terms of security
  • the changes to /run/dhcpcd won't affect root access, either, and are only effective during runtime
  • I'm not familiar with the exec flags, tbh - I won't have to add myself to the _dhcpcd group in order for this to work, correct?

@dkwo
Copy link
Contributor Author

dkwo commented Aug 14, 2025 via email

@dogknowsnx
Copy link
Contributor

dogknowsnx commented Oct 9, 2025

@dkwo Maybe adjust the title reflecting the update, as well

@dkwo dkwo changed the title dhcpcd: add unprivileged service dhcpcd: add unprivileged service, update to 10.2.4 Oct 10, 2025
@github-actions
Copy link

github-actions bot commented Jan 8, 2026

Pull Requests become stale 90 days after last activity and are closed 14 days after that. If this pull request is still relevant bump it or assign it.

@github-actions github-actions bot added the Stale label Jan 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

core core package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants