NOTE: Enabling root could be a security issue but it's required by some feature.
]]>
+
NOTE: Running as user root could be a security issue but it may be required by some features.
]]>true
diff --git a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
index 091d1d4d0..536ce0814 100644
--- a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
+++ b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
@@ -836,8 +836,8 @@ userlist {{object.name | regex_replace ("[^A-Za-z0-9]","")}}
{#- ############################### -#}
global
+{# # NOTE: Running as root could be a security issue, but is required for some features. #}
{% if OPNsense.HAProxy.general.tuning.root != "1" %}
- # NOTE: Could be a security issue, but required for some feature.
uid 80
{% endif %}
gid 80