diff --git a/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/generalTuning.xml b/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/generalTuning.xml index 0fd011d4d..9fdeb1e63 100644 --- a/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/generalTuning.xml +++ b/net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/generalTuning.xml @@ -7,7 +7,7 @@ haproxy.general.tuning.root checkbox -
NOTE: Enabling root could be a security issue but it's required by some feature.
]]>
+
NOTE: Running as user root could be a security issue but it may be required by some features.
]]>
true diff --git a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf index 091d1d4d0..536ce0814 100644 --- a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf +++ b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf @@ -836,8 +836,8 @@ userlist {{object.name | regex_replace ("[^A-Za-z0-9]","")}} {#- ############################### -#} global +{# # NOTE: Running as root could be a security issue, but is required for some features. #} {% if OPNsense.HAProxy.general.tuning.root != "1" %} - # NOTE: Could be a security issue, but required for some feature. uid 80 {% endif %} gid 80