Bug 57787 - Необходимо запускать сервис от непривелегированного пользователя
Summary: Необходимо запускать сервис от непривелегированного пользователя
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: keycloak (show other bugs)
Version: unstable
Hardware: all Linux
: P5 critical
Assignee: Andrey Cherepanov
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-02-06 19:05 MSK by Alexey Shabalin
Modified: 2026-02-23 10:35 MSK (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexey Shabalin 2026-02-06 19:05:02 MSK 
Запуск сервиса от root опасен.
Comment 1 Repository Robot 2026-02-23 10:35:30 MSK 
keycloak-26.5.4-alt1 -> sisyphus:

Sun Feb 22 2026 Andrey Cherepanov <cas@altlinux> 26.5.4-alt1
- New version (fixes: CVE-2026-1190, CVE-2026-0707, CVE-2025-5416,
  CVE-2026-2575, CVE-2026-2733).
- Run service under non-privileged user (ALT #57787).
- Used certificates from /etc/keycloak/ssl.