From 99861c249c866e1c4f911f3c3da6de9cef2c3f02 Mon Sep 17 00:00:00 2001 From: Antonio Russo Date: Mon, 2 Jun 2025 21:37:20 -0600 Subject: [PATCH] Do not start mpris-proxy for system users MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit A default installation of bluez results in the systemd user unit mpris-proxy.service being started for all users---including root. This unnecessarily exposes system users to any security vulnerabilities in mpris-proxy. Inhibit this default behavior by using ConditionUser=!@system. Reviewed-by: Guido Günther Reviewed-by: Paul Menzel Reviewed-by: Andrew Sayers --- tools/mpris-proxy.service.in | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/mpris-proxy.service.in b/tools/mpris-proxy.service.in index c49d255b3..6ae56c672 100644 --- a/tools/mpris-proxy.service.in +++ b/tools/mpris-proxy.service.in @@ -4,6 +4,7 @@ Documentation=man:mpris-proxy(1) Wants=dbus.socket After=dbus.socket dbus.service +ConditionUser=!@system [Service] Type=simple -- 2.47.3