<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [PATCH] implement --drop-privileges flag"
href="https://bugs.freedesktop.org/show_bug.cgi?id=92684#c3">Comment # 3</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [PATCH] implement --drop-privileges flag"
href="https://bugs.freedesktop.org/show_bug.cgi?id=92684">bug 92684</a>
from <span class="vcard"><a class="email" href="mailto:tanuk@iki.fi" title="Tanu Kaskinen <tanuk@iki.fi>"> <span class="fn">Tanu Kaskinen</span></a>
</span></b>
<pre>Hi Robert! Sorry for taking long with this reply.
To me it seems that running pulseaudio as root is a bad idea for security
reasons, and there don't seem to be strong evidence for people actually needing
this capability. I'm not sure what kernel interfaces you actually need to
access as root, but if it's about accessing some specific node under /dev,
wouldn't it be much better to give the "pulse" user access to that device node,
instead of giving it access to absolutely everything on the system?</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>