[Announcement] Tinc version 1.0.34 released

Pedro CĂ´rte-Real pedro at pedrocr.net
Mon Jul 2 10:39:33 CEST 2018


On Tue, Jun 12, 2018 at 4:00 PM, Guus Sliepen <guus at tinc-vpn.org> wrote:
> * Fix a potential segmentation fault when connecting to an IPv6 peer via a
   proxy.
>  * Make the systemd service file identical to the one from the 1.1 branch.

The default in the package (and as packaged by Debian) is to run tinc
as root. It's quite easy to run tinc as a normal user by doing:

ExecStart=/usr/sbin/tincd --user=tinc -n %i -D

and then having /etc/tinc be owned by the tinc user.

Why isn't this the recommended default? Tinc listens on public
interfaces to be useful and can have potentially exploitable bugs (as
can also be seen in this version).

Cheers,

Pedro


More information about the tinc mailing list