diff --git a/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/main.xml b/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/main.xml index c3f131a9a..efb2117e8 100644 --- a/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/main.xml +++ b/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/main.xml @@ -17,6 +17,13 @@ NOTE: Define global parameters for the HAProxy service. They cannot be overriden. info + + haproxy.general.tuning.root + Run as root + checkbox + NOTE: Enabling root could be a security issue but it's required by some feature.]]> + true + haproxy.general.tuning.chroot Secure mode (chroot) diff --git a/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml b/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml index de0949104..d98297607 100644 --- a/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml +++ b/net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml @@ -10,6 +10,10 @@ Y + + 0 + Y + 0 Y diff --git a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf index 4f1fe8e63..37b30e3c2 100644 --- a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf +++ b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf @@ -441,7 +441,10 @@ {# ############################### #} global - #uid 80 +{% if OPNsense.HAProxy.general.tuning.root != "1" %} + # NOTE: Could be a security issue, but required for some feature. + uid 80 +{% endif %} gid 80 {% if OPNsense.HAProxy.general.tuning.chroot == "1" %} # NOTE: chroot prevents (most) local logging, you need to enable remote