nailgun service runs as user 'root'

Bug #1675008 reported by Adam Heczko
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Confirmed
Medium
Fuel Sustaining

Bug Description

It was observed that nailgun service runs as root.
Most likely the service does not require 'root' account privileges, therefore it is recommended to run service with non root user account.

# ps xauw | grep nailgun
root 707 0.0 0.1 199356 5000 ? Ss Jan11 8:15 /usr/sbin/uwsgi -y /etc/nailgun/uwsgi_nailgun.yaml
root 756 0.2 2.2 478796 86012 ? S Jan11 277:44 /usr/sbin/uwsgi -y /etc/nailgun/uwsgi_nailgun.yaml
root 757 0.1 2.1 476704 84712 ? S Jan11 117:32 /usr/sbin/uwsgi -y /etc/nailgun/uwsgi_nailgun.yaml
root 758 0.0 2.1 477604 85196 ? S Jan11 47:01 /usr/sbin/uwsgi -y /etc/nailgun/uwsgi_nailgun.yaml
root 759 0.0 2.1 475332 82096 ? S Jan11 5:31 /usr/sbin/uwsgi -y /etc/nailgun/uwsgi_nailgun.yaml
root 760 0.0 0.0 207780 2352 ? S Jan11 0:00 /usr/sbin/uwsgi -y /etc/nailgun/uwsgi_nailgun.yaml

# netstat -anpe | grep uwsgi
tcp 0 0 0.0.0.0:8001 0.0.0.0:* LISTEN 0 19210 707/uwsgi

Dmitry Pyzhov (dpyzhov)
Changed in fuel:
assignee: nobody → Fuel Sustaining (fuel-sustaining-team)
status: New → Confirmed
importance: Wishlist → Medium
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.